DATA  CENTER  DUEL 

Microsoft  woos  mainframe  users;  IBM  tries 
to  be  the  big  iron  on  campus,  page  io 


a  OPINION 

Software  users  are  mad  as  hell,  says  Gary  H.  Anthes,  but 
they’re  not  quite  ready  to  do  anything  about  it.  page  aq 
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Oracle  gobbled  up  PeopleSoft,  which  gobbled  up 
J.D.  Edwards  —  and  pundits  say  more  IT  merger 
headaches  tire  on  the  way.  Here’s  how  to  prepare  for  the 
inevitable  and  cope  with  the  aftermath.  Page  35 


IT  Blogging  Is  One-Sided 


Vendors  embrace  the 
concept,  but  users 
are  slow  to  join  in 

BY  PATRICK  THIBODEAU 

Major  IT  vendors  are  encour¬ 
aging  employees  to  start  blogs 
to  reach  out  to  users  in  new 


ways  and  help  make  the  com¬ 
panies  seem  less  impersonal. 
But  so  far,  the  blogging  con¬ 
versation  is  mostly  one-sided. 

As  yet,  there  aren’t  many  IT 
managers  blogging  about  big- 
picture  technology  issues, 
based  on  interviews  with  ven¬ 
dors  and  Internet  searches 


conducted  by  Computers orld. 

“Clearly,  vendors  have  much 
stronger  pressure  on  them  to 
have  a  relationship  with  the 
world,”  said  Tim  Bray,  director 
of  Web  technologies  at  Sun 
Microsystems  Inc.  But  CIO 
blogs  would  get  instant  atten¬ 
tion  from  vendors,  Bray  added. 
“If  a  few  of  those  guys  started 
doing  that,  you  can  darn  well 
bet  that  we  would  be  reading 
them.  I  sure  would,”  he  said. 

Among  the  IT  managers 
who  do  blog  is  Alex  Scoble, 

Blogs,  page  16 


MORE  INSIDE 

U.K.-based  eCourier  used  blogging 
tools  to  coordinate  software  devel¬ 
opers  in  three  countries.  PAGE  16 
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Feds  Take  Aim  at 
Spyware,  but  IT 
Isn’t  Optimistic 

Users  say  global  scope  of  problem  puts  many 
purveyors  beyond  reach  of  proposed  laws 


BY  JAIKUMAR  VIJAYAN 

Two  antispyware  bills  that 
were  passed  by  the  U.S. 

House  of  Representatives  last 
week  could  make  it  easier  for 
law  enforcement  officials  to 
prosecute  developers  of  such 
software  and  help  security 
vendors  develop  tools 
aimed  at  blocking  the 
programs. 

But  the  international 
nature  of  the  problem 
makes  it  unlikely  that 
the  proposed  U.S.  laws 
will  do  much  to  stanch 
the  spread  of  spyware,  several 
IT  managers  said  last  week. 

“I’m  very  happy  that  they 
are  trying  to  do  something,” 
said  Steve  Gelfound,  IT  oper¬ 
ations  manager  for  the  En¬ 
dangered  Child  Unit  of  the 


mm 


Go  to  our  Web 
site  for  full 
IT  security 
coverage: 
QuickUilk 
k1600 


National  Center  for  Missing 
&  Exploited  Children  in 
Alexandria,  Va.  “But  it’s  really 
hard  to  try  and  control  the 
Internet.” 

Gelfound  added  that  the 
proliferation  of  spyware  is  a 
global  problem.  “Until  every¬ 
body  agrees  to  get  to¬ 
gether  and  do  some¬ 
thing,  it’s  going  to  be 
almost  impossible  to 
stop  it,”  he  said. 

The  two  bills,  which 
were  approved  by  wide 
margins,  would  impose 
monetary  penalties  and  jail 
terms  for  people  who  use 
spyware  programs  to  gather 
information  from  computers, 
monitor  usage  and  serve  up 
advertisements  without  user 
Spyware,  page  45 


DB2  Needs  Better  Backing 


Users  urge  IBM  to 
help  push  database 
to  corporate  execs 

BY  MARC  L.  SONGINI 

DENVER 

If  IBM  wants  corporate  exec¬ 
utives  to  spend  money  on  its 
database  technology  instead 
of  on  rival  products,  it  must 
do  a  better  job  of  promoting 
the  software,  said  attendees  at 


last  week’s  International  DB2 
Users  Group  conference  here. 

The  more  IBM  pushes  DB2, 
users  said,  the  easier  it  will  be 
for  them  to  sell  the  technolo¬ 
gy  inside  their  companies  and 
fend  off  attempts  to  replace  it 
with  Oracle  or  SQL  Server. 

“I  want  IBM  to  blow  its 
own  horn  more  aggressively,” 
said  a  program  analyst  at  an 
insurance  company  that  runs 
DB2,  page  45 
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THE  NEW  DELL  PRECISION™ 
380  WORKSTATION  WITH 
THE  PERFORMANCE  AND 
RELIABILITY  OF  THE  INTEL® 
PENTIUM®  PROCESSOR 
EXTREME  EDITION. 


NOW  IS  THE  TIME  TO 

get  the  power  of  dual-core  processing 
from  the  all-new  Dell  Precision  380 
Workstation  featuring  the  Intel®  Pentium® 
Processor  Extreme  Edition.  Get  the  power 
to  multi-thread  several  tasks  at  once  and 

GET  MORE  OUT  OF  NOW. 


Click  www.dell.com/precision23 
Cell  (toil  free)  1.866.223.5209 


All  the  productivity  you  want. 

All  the  document  security  you  need 


sharpusa.com/security 


How  secure  is  your 
digital  information? 


Make  sure  your  copier  is  security  compliant.  Financial  facts, 
personnel  records,  customer  lists:  networked  copiers/printers 
process  sensitive  information  every  day.  Unfortunately,  their  hard 
drives  can  be  accessed  via  the  network,  contributing  to  $60  billion 
in  data  theft  every  year.*  To  protect  this  weak  link,  we've  created  our 
Data  Security  Kit.  It's  the  first  copier  and  printer  protection  validated 
by  Common  Criteria,  a  government-sponsored  program,  and  it's 
available  with  our  Digital  IMAGER™  series  of  copiers/printers. 
Sharp's  Data  Security  Kit.  Be  Secure.  Be  Sharp. 


2004  Award  Winner 


be  sharp 


Software  Reuse: 

Making  It  Work 

In  the  Management  section:  DTE 

Energy  has  set  up  its  own  “open- 
source”  software  operation.  Here’s 
how  it  got  in-house  developers  to 
buy  into  reuse.  Page  37 
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Record  Risks 

In  the  Technology  section:  Despite  increased  regu¬ 
lation  and  high-profile  million-dollar  fines,  many 
businesses  still  aren’t  identifying  and  managing 
corporate  records  well.  The  biggest  liability  is 
e-mail  and  other  unstructured  data.  Page  21 
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6  Users  are  turning  to  IBM’s 
Rational  portfolio  manage¬ 
ment  tools  to  monitor  risks 
and  justify  investments  in 
application  development. 

7  Hewlett-Packard  is  adding 
support  for  virtual  partition¬ 
ing  to  the  latest  version  of  its 
HP-UX  operating  system. 

8  Clustered  storage  may  re¬ 
place  individual  NAS  systems, 
say  users  coping  with  more 
and  more  stand-alone  arrays. 

10  Microsoft  courts  mainframe 
users  with  Windows  servers, 
although  some  analysts  are 
skeptical  that  the  vendor  will 
get  very  far. 

10  IBM  sets  a  goal  of  putting 
20,000  students  through  its 
mainframe  curriculum  by 
2010  as  part  of  an  effort  to  re¬ 
place  retiring  baby  boomers. 

12  Insiders  pose  a  bigger  threat 
to  corporate  security  than  ex¬ 
ternal  hackers  do,  making 
tight  internal  controls  a  must, 
security  pros  say. 

12  Several  start-ups  are  offering 
software  designed  to  collect 
ideas  from  large  groups  of 
workers  and  prioritize  which 
suggestions  should  be  pursued. 

14  Global  Dispatches:  Hitachi 
replaces  employee  PCs  with 
thin  clients  in  an  attempt  to 
boost  security. 

16  Blogging  tools  aid  an  interna¬ 
tional  package-tracking  soft¬ 
ware  project  at  a  U.K.-based 
courier  company. 


26  All  Together  Now.  For  systems 
integrators,  making  technol¬ 
ogies  interoperate  is  all  in  a 
day’s  work.  They  share  their 
secrets  for  planning  and  exe¬ 
cuting  integration  projects. 

30  QuickStudy:  Supercomputers. 

The  term  supercomputer  is  a 
relative  one,  referring  to  a 
computer  that  leads  all  others 
in  performance  at  the  time  it’s 
introduced. 

32  Security  Manager’s  Journal: 
More  Than  a  Token  Overhaul 

of  the  VPN.  Mathias  Thurman 
gets  the  green  light  to  deploy 
two-factor  authentication  to 
improve  VPN  security,  but  he 
faces  a  daunting  revamp  of 
the  existing  infrastructure. 

MANAGEMENT 

35  When  IT  Vendors  Merge.  If 

none  of  your  major  vendors 
has  been  acquired  yet,  just 
wait.  Here’s  how  to  anticipate 
a  merger  and  respond  from  a 
position  of  strength. 

38  Q&A:  Innovation  at  the  Edge. 

The  future  lies  at  the  edge 
of  your  company,  where  it 
can  reach  across  geographic 
and  even  competitive  bound¬ 
aries  to  add  value,  say  authors 
John  Hagel  III  and  John  Seely 
Brown. 

39  Competing  in  a  New  Age.  We 

take  a  look  at  books  on  the 
dwindling  U.S.  talent  pool,  the 
importance  of  “obvious”  ques¬ 
tions  in  project  management, 
and  what  “real  time”  is  really 
all  about. 


20  Don  Tennant  thinks  the  adop¬ 
tion  by  many  companies  of  a 
thin-client  computing  model 
might  come  from  an  unex¬ 
pected  catalyst:  the  prolifera¬ 
tion  of  MP3  players. 

20  Michael  Gartenberg  is  tired 
of  mediocrity  in  the  hardware 
and  software  he  uses  and 
misses  the  really  great  stuff 
of  days  gone  by. 

21  John  D.  Halamka  calls  for  a 
DNS  for  patients  that  would 
give  health  care  providers 
access  to  medical  records, 
without  the  risks  of  a  national 
health  identifier. 

33  Douglas  Schweitzer  com¬ 
pares  Linux  and  Windows  for 
business  and  favors  the  open- 
source  operating  system. 

40  Gary  H.  Anthes  says  corpo¬ 
rate  users  who  are  fed  up  with 
lopsided  software  licenses 
that  give  all  rights  to  the  ven¬ 
dor  do  have  some  leverage, 
but  fighting  back  takes  a  lot 
of  hard  work. 

46  Frankly  Speaking:  Frank 

Hayes  was  pleasantly  sur¬ 
prised  at  how  quickly  the  FBI 
has  moved  to  create  a  new 
system  for  information  shar¬ 
ing  —  and  at  its  ability  to 
learn  from  past  mistakes. 
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The  Joys  of  Spotlight 

MACINTOSH:  Columnist  Yuval  Kossovsky 
takes  the  Tiger  plunge  and  installs  Mac  OS  X 
10.4  on  his  PowerBook.  His  favorite  feature 
so  far?  Spotlight.  ©  QuickLink  a5910 

Eye  on  Offshoring 

IT  MANAGEMENT:  INS’s  Scott  Warren  suggests 
that  successful  outsourcing  always  begins 
with  an  alignment  of  the  IT  strategy  to  the 
overall  business  strategy.  ©  QuickLink  54512 

Employee  Awareness: 

The  Missing  Link 

SECURITY:  Symantec’s  regional  education 
director  offers  tips  for  setting  up  a  security 
training  program  at  your  company. 

©  QuickLink  54495 

Sun’s  Storage  Outlook 

STORAGE:  According  to  columnist  Steve 
Duplessie,  there  are  several  good  reasons  to 
believe  —  and  disbelieve  —  that  Sun  Micro¬ 
systems  is  finally  getting  its  act  together. 

©  QuickLink  a5900 

Beyond  the  Supply  Chain 

MOBfLE/WIRELESS:  RFID  is  coming,  consul¬ 
tant  David  H.  Williams  says,  and  it  will  have 
a  big  impact  on  both  your  business  and  IT 
infrastructure.  ©  QuickLink  54436 
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U.S.  Cancels  $1B 
AT&T  Telecom  Pact 

The  U.S.  Department  of  the  Trea¬ 
sury  has  canceled  a  $1  billion 
telecommunications  contract  won 
by  AT&T  Corp.  last  December,  af¬ 
ter  protests  from  other  bidders 
were  supported  by  the  Govern¬ 
ment  Accountability  Office  (GAO). 
AT&T  said  if  intends  to  remain  “fo¬ 
cused  on  how  we  can  best  meet 
the  Treasury  Department’s  needs.” 


CA  Sees  Profit  Dip, 
Is  Restating  Results 

Computer  Associates  Internation¬ 
al  Inc.  reported  a  steep  fourth- 
quarter  profit  decline  on  a  7%  in¬ 
crease  in  revenue.  CA  also  said  it 
plans  to  restate  its  financial  re¬ 
ports  from  1998  to  2005. 


CA  BY  THE  NUMBERS 

REVENUE 

PROFIT 

Q4  '05 

S910M 

S17M 

Q4’04 

S850M 

S89M 

Cisco  Purchases 
Appliance  Maker 

Cisco  Systems  Inc.  has  agreed 
to  buy  network  appliance  maker 
FineGround  Networks  Inc.  in 
Campbell,  Calif.,  for  about 
S70  million  in  cash.  Cisco  plans 
to  use  FineGround’s  technology 
to  provide  advanced  application 
acceleration  across  networks  for 
the  secure  delivery  of  Web-based 
applications.  The  close  of  the 
deal  is  expected  by  midyear. 


GAO  Criticizes  DHS 
Cybersecurity  Plan 

The  U.S.  Department  of  Home¬ 
land  Security  must  do  more  to 
protect  the  nation’s  critical  infor¬ 
mation  infrastructure,  according 
to  a  GAO  report.  While  the  de¬ 
partment  has  begun  efforts  to  ful¬ 
fill  its  cybersecurity  duties,  it  still 
must  develop  national  cyberthreat 
and  vulnerability  assessments 
and  contingency  plans  -  including 
a  plan  for  recovering  key  Internet 
functions,  the  report  said. 


Users  Seek  Tools  to 
Ease  Project  Risks 

Portfolio  management  software  can 
help  align  business,  IT  project  goals 


BY  HEATHER  HAVENSTEIN 

LAS  VESAS 

nterprises  are  turn¬ 
ing  to  project  manage¬ 
ment  tools  to  monitor 
risks  and  justify  in¬ 
vestments  for  application  de¬ 
velopment  efforts. 

Users  at  IBM’s  Rational 
Software  Development  Con¬ 
ference  here  said  last  week 
that  tools  like  IBM’s  Rational 
Portfolio  Manager  are  helping 
development  groups  better 
align  projects  with  overarch¬ 
ing  business  goals. 

International  Paper  Co. 
turned  to  IBM’s  portfolio  man¬ 
agement  product  to  provide 
visibility  into  its  complex  de¬ 
velopment  pipeline,  said  Mark 
Towne,  senior  manager  of  IT 
solutions  and  services  at  the 
Stamford,  Conn.-based  firm. 

“We  were  flying  blind  —  we 
had  600  to  700  projects  going 
on,  [but]  we  had  no  handle  on 
[whether  we  could]  deliver 
what  was  in  the  pipeline,” 


H  There  was  no 
process  in  our 
$26  billion  company 
for  deciding  how  our 
IT  spending  was 
going  to  get  done 
strategically. 

MARK  TOWNE, 

INTERNATIONAL  PAPER 

Towne  said.  “There  was  no 
process  in  our  $26  billion 
company  for  deciding  how  our 
IT  spending  was  going  to  get 
done  strategically.” 

Beginning  in  January,  the 
paper  company  required  that 
all  new  development  projects 
be  managed  in  the  Rational 
system.  Now  International  Pa¬ 
per  has  439  proposals,  427 
projects  and  more  than  1,100 
application  enhancements  be¬ 
ing  planned  and  monitored  in 
the  system,  Towne  said. 


The  company  can  check 
potential  development  proj¬ 
ects  against  business  goals 
earlier  in  the  process,  he  said. 
Portfolio  management  “can  be 
a  weapon  to  drive  shareholder 
value”  by  identifying  and  re¬ 
jecting  early  on  projects  that 
won’t  provide  a  healthy  return 
on  investment,  he  added. 

IBM  is  one  of  a  number  of 
vendors  selling  IT  portfolio 
management  tools,  said  David 
Kelly,  president  of  Upside  Re¬ 
search  Inc.  in  Newton,  Mass. 
Some  suppliers,  like  Com- 
puware  Corp.,  have  long  sold 
such  tools,  he  said.  Others 
in  this  business  include  Bor¬ 
land  Software  Corp.,  Oracle 
Corp.,  Mercury  Interactive 
Corp.,  Microsoft  Corp.  and 
ProSight  Inc. 

IBM  joined  the  fray  late  last 
year  with  its  acquisition  of 
Systemcorp  ALG  Ltd.  and  its 
PMOffice  tool  [QuickLink 
50069].  The  vendor  plans  to 
update  the  tool  at  some  point 
to  provide  a  direct  feed  from 
development  products  to  Port¬ 
folio  Manager,  said  Roger 
Oberg,  Rational’s  vice  presi- 

What  are  the  biggest  pain 
points  in  IT  development 
shops,  and  how  will  you  mold 
the  product  offerings  to  meet 

those  needs?  The  pressure  is  re¬ 
ally  on  return  on  investment  Over  j 
the  years,  we  have  disconnected 
ourselves  as  software  engineers 
and  as  IT  implemented.  We’ve 
focused  on  technology,  and  we 
haven’t  done  a  good  enough  job 
of  relating  that  technology  to 
business  needs.  Giving  enterpris¬ 
es  the  tools  and  the  capabilities 
to  be  much  more  successful  in 
bridging  that  gap  between  where 
the  business  wants  to  go  is  crucial 
to  that  type  of  transformation. 

What  does  IBM’s  recent  ac¬ 
quisition  of  open-source  ven- 
j  dor  Gluecode  Software  mean 
from  a  tools  perspective?  Our 


dent  of  product  marketing. 

Kristin  Leard,  an  architect 
at  Hartford  Financial  Services 
Group  Inc.  in  Hartford,  Conn., 
said  her  company  is  looking  at 
the  IBM  tool’s  dashboard  fea¬ 
ture,  which  is  designed  to  pro¬ 
vide  tables,  maps  and  graphi¬ 
cal  displays  of  status  and  com¬ 
parisons  to  detail  ROI  and 
payback  of  projects. 

Karen  Abernathy,  senior 
technical  consultant  at  HSBC 
Bank  PLC  in  New  York,  said 
her  company  is  eyeing  Portfo¬ 
lio  Manager  to  provide  trans¬ 
parency  and  ensure  that  the 
company  is  choosing  the  right 
projects  to  gain  business  value. 

Visa  U.S.A.  Inc.  is  rolling 
out  Portfolio  Manager  to  help 
display  the  status  of  develop¬ 
ment  progress  to  upper  man¬ 
agement.  Visa  has  used  Ratio¬ 
nal’s  RequisitePro  require¬ 
ments  management  tool  to 
monitor  the  risks  and  progress 
of  IT  projects. 

“We  want  [project  man¬ 
agers]  actually  mitigating  risk 
throughout  the  project,”  said 
Michael  Levine,  project  man¬ 
ager  at  Foster  City,  Calif.- 
based  Visa.  ©  54679 


MORE  ONUNE 

IBM’s  Rational  unit  introduced  tools  that 
link  testing  and  development  apps  with 
Tivoli  systems  management  software: 

QuickLink  54661 
www.computerworld.com 


acquisition  of  Gluecode  was  a 
sign  that  says  “Open-source  is 
here  to  stay.”  Open-source  is  an 
evolution  of  where  software  is 
going.  It  is  something  that  you 
have  to  pay  attention  to. 

What  Is  your  take  on  Micro¬ 
soft’s  planned  entry  into  Ra¬ 
tional’s  traditional  stronghold 
of  team  development  with  its 
Visual  Studio  2005  Team 
System?  I  welcome  the  compe¬ 
tition.  They’ve  got  a  long  way  to 
go  on  the  team  side  and  model- 
driven  development  side.  I  don’t 
think  they  will  ever  be  able  to 
match  our  ability  to  take  the 
model-driven  design,  to  take  the 
team  side  and  map  it  to  as  strong 
or  open  or  broad  a  middleware 
portfolio  as  what  we  can  do. 

-  Heather  Havenstein 


New  IBM  Rational  Head  Talks  Priorities 


LAS  VEGAS 

Daniel  Sabbah,  who  joined  IBM 
in  1974,  was  recently  named  gen¬ 
eral  manager  of  IBM’s  Rational 
division,  which  makes  develop¬ 
ment  and  testing  tools.  He  previ¬ 
ously  served  as  vice  president  of 
strategy  and  architecture  in 
IBM’s  software  group.  Sabbah 
spoke  with  Computerworld  last 
week  during  the  Rational  Soft¬ 
ware  Development  Con¬ 
ference  here. 

What  will  be  your  top 
priorities  as  the  new 
general  manager  at 
Rational?  To  grow  the 
business,  the  appeal  of 
the  Rational  tools  and 
methodology  world  - 


both  from  a  pure  business  stand¬ 
point  in  terms  of  revenue,  but 
also  in  constituencies. 

So  far,  Rational  has  been  ex¬ 
tremely  valuable  to  a  set  of  core 
software  engineers.  We  want  to 
stick  with  that  constituency.  But 
we  also  want  to  start  appealing 
to  broader  constituencies  of  de¬ 
velopers,  as  well  as  starting  to 
play  into  the  connections  be¬ 
tween  software  engi¬ 
neers  and  business  ana¬ 
lysts,  and  the  connection 
between  software  engi¬ 
neers  and  operations 
and  deployment  issues. 
I’d  like  to  take  in  more  of 
the  collaboration  capabil¬ 
ities  we  have  in  our  Lotus 
portfolio. 
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HP’s  Unix  Servers  to  Get  Virtualization  Boost 

OS  update  will  add  partitioning  support 


BY  ROBERT  McMILLAN 

Hewlett-Packard  Co.  is  putting 
the  finishing  touches  on  an 
updated  release  of  its  HP-UX 
operating  system  that  will  add 
virtual  partitioning  capabili¬ 
ties  to  the  company’s  Itanium- 
based  Integrity  servers. 

The  update  will  also  make 
the  virtualization  technology 
available  to  users  of  the  HP 
9000  server  line  who  want  to 
install  the  latest  version  of 
HP-UX.  Mary  Ellen  Lewan- 
dowski,  director  of  Unix  prod¬ 
uct  marketing  at  HP,  said  last 
week  that  the  update  is  due  in 
early  July  as  a  patch  to  HP-UX 
lli  v2. 

The  Virtual  Partitions  fea¬ 
ture,  known  informally  as 
vPars,  lets  users  install  more 
than  one  copy  of  HP-UX  on  a 
computer.  The  upcoming  re¬ 
lease  marks  the  first  time  vPars 
has  been  offered  for  the  Integ¬ 
rity  systems,  which  use  Intel 
Corp.’s  Itanium  2  processors. 

For  years,  HP  has  included 
the  technology  in  the  HP  9000 
machines,  which  are  based  on 
its  own  PA-RISC  chips.  But 
HP-UX  lli  v2,  the  first  version 
of  the  operating  system  that 


offers  identical  feature  sets  for 
both  server  lines,  lacked  sup¬ 
port  for  vPars  when  it  was  re¬ 
leased  late  last  year.  As  a  re¬ 
sult,  many  HP  9000  users  have 
held  off  on  installing  the  new 
software. 

Eager  Users 

As  far  back  as  last  August’s  HP 
World  user  conference,  cus¬ 
tomers  began  asking  when 
HP  would  ship  the  upcoming 
release  with  the  virtualization 
capabilities,  said  Steven  Prot- 
ter,  a  Chicago-based  HP-UX 
consultant.  “The  biggest 
question  that  came  up  at  HP 
World  2004  was,  ‘When  is 
vPars  support  going  to  hap¬ 
pen?’  ”  he  said. 

Though  HP  has  faced  some 
criticism  for  being  slow  to  add 
features  to  HP-UX,  Protter 
said  he’s  satisfied  with  its  ap¬ 
proach.  “HP’s  attitude  is  to  be 
reliable,  and  they  don’t  have  a 
problem  with  holding  a  re¬ 
lease  to  make  sure  it’s  quality- 
tested,”  he  said.  “They’d  rather 
be  late  than  wrong.” 

By  enabling  the  use  of  vPars 
with  the  Integrity  line,  HP  is 
delivering  a  “sorely  needed” 


capability,  said  Tony  lams,  an 
analyst  at  Ideas  International 
Inc.  in  Port  Chester,  N.Y.  But, 
he  added,  the  company  still 
lags  behind  rivals  such  as  IBM 
and  Sun  Microsystems  Inc.  on 
support  for  virtualization. 

HP  said  that  to  address  that 
functionality  gap,  it’s  develop¬ 
ing  more-powerful  virtualiza- 


HEWLETT-PACKARD  this  week 
plans  to  formally  announce  the 
final  processor  upgrade  to  the 
HP  9000  server  line  plus  the 
first  models  of  its  NonStop  fault- 
tolerant  systems  that  are  based 
on  Intel’s  Itanium  2  chips. 

The  new  PA-8900  processor 
for  the  HP  9000  will  have  a 
much  larger  Level  2  memory 
cache  than  its  predecessor  but 
will  operate  at  clock  speeds  that 
are  only  slightly  faster,  according 
to  information  posted  on  HP’s 
Web  site.  The  PA-8900  will  be 
sold  in  800-MHz,  1-GHz  and  1.1- 
6Hz  versions  with  64MB  of  on- 
chip  cache,  compared  with  a 
maximum  clock  speed  of  1.1  GHz 
and  a  32MB  cache  on  the  exist- 


tion  technology  that’s  expect¬ 
ed  to  ship  by  year’s  end. 

In  addition  to  vPars,  the 
July  update  to  HP-UX  will  in¬ 
clude  a  feature  called  Secure 
Resource  Partitions,  which 
will  let  users  separate  several 
applications  on  one  copy 
of  the  operating  system, 
Lewandowski  said. 


ing  PA-8800  processor. 

The  new  chip  is  the  last  in  the 
line  of  HP’s  PA-RISC  processors. 
The  company  has  said  it  will  sup¬ 
port  the  HP  9000  servers  that 
use  PA-RISC  chips  until  2011,  but 
it  has  abandoned  further  devel¬ 
opment  of  the  processors  as  part 
of  its  embrace  of  Itanium  2. 

The  PA-8900  was  expected 
to  have  clock  speeds  in  the 
range  of  1.2  to  1.5  GHz.  But  Ideas 
International  analyst  Rich  Par¬ 
tridge  said  it  isn’t  surprising  that 
HP  decided  to  release  such  a 
modest  processor  update,  given 
that  the  company  has  bet  its  fu¬ 
ture  on  Itanium-based  Integrity 
hardware  and  is  trying  to  boost 
the  line’s  use. 


HP  is  also  working  to  add 
support  for  Veritas  Software 
Corp.’s  clustering  and  ad¬ 
vanced  file-system  technolo¬ 
gies  to  HP-UX.  That  will  be 
included  in  a  subsequent  up¬ 
date  due  sometime  between 
August  and  early  October,  ac¬ 
cording  to  Lewandowski. 
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McMillan  writes  for  the 
IDG  News  Service. 

Giving  HP  9000  users  a  big¬ 
ger  CPU  performance  boost 
would  “allow  them  to  be  comfort¬ 
able  staying  on  PA-RISC  for  a 
longer  amount  of  time,”  Partridge 
noted.  “I  don’t  think  HP  wants  to 
prolong  the  transition.” 

The  Itanium-based  Integrity 
NonStop  systems  being  an¬ 
nounced  this  week  were  initially 
targeted  for  release  late  last  year 
[QuickLink  44650].  They  are  re¬ 
placing  models  based  on  chips 
from  MIPS  Technologies  Inc.  in 
Mountain  View,  Calif.  HP  said  the 
new  servers  will  be  capable  of 
running  one  copy  of  its  NonStop 
operating  system  across  as  many 
as  4,080  processors.  Shipments 
are  due  to  begin  in  July,  with 
prices  starting  at  $400,000. 

-  Robert  McMillan 


HP  Readies  Last  PA-RISC  Chip 


Alcatel  Adds  Switches  to 
Link  Wired,  Wireless  LANs 


BY  MATT  HAMBLEN 

Alcatel  this  week  will  an¬ 
nounce  a  second  generation  of 
wireless  LAN  switches,  adding 
functionality  that  further  ex¬ 
tends  the  security  and  man¬ 
agement  capabilities  of  wired 
networks  to  WLANs. 

Alcatel  is  adding  seven 
switches  made  by  Sunnyvale, 
Calif.-based  Aruba  Wireless 
Networks  to  its  OmniAccess 
WLAN  switch  family,  which 
debuted  in  March 
2004  with  a  series  of 
devices  also  devel¬ 
oped  by  Aruba. 

The  new  switches 
will  give  IT  adminis¬ 
trators  the  ability  to 
integrate  LAN-based 


management  tools  from  other 
vendors  and  Alcatel’s  own 
OmniVista  software  with  Wi¬ 
Fi  networks,  said  Brian  Witt, 
director  of  product  marketing 
at  Paris-based  Alcatel,  which 
has  its  U.S.  headquarters  in 
Calabasas,  Calif. 

New  software  from  Alcatel 
will  extend  LAN  security 
functions,  such  as  attack  con¬ 
tainment  capabilities,  to  Wi-Fi 
networks,  Witt  added.  Other 


security  features  include  cen¬ 
tralized  encryption  for  802.11i 
firewalls,  with  the  switches 
assigning  access  rights  to  end 
users  and  then  applying  those 
privileges  no  matter  where  a 
user  connects  to  a  network. 

Gordon  College  in  Wenham, 
Mass.,  plans  to  install  one  of 
the  new  switches  this  summer 
as  an  upgrade  to  its  existing 
OmniAccess  device,  said  Russ 
Leathe,  director  of  networking 
and  computer  services  at  the 
1,500-student  college. 

Leathe  said  he  welcomes 
further  integration  of  manage¬ 
ment  and  security  functions 
for  the  school’s  wired 
networks  and  Wi-Fi 
LANs.  “We  cannot  afford 
to  maintain  multiple  ven¬ 
dors’  solutions  and  ex¬ 
pect  them  to  integrate,” 
he  said,  noting  that  at 
colleges  especially,  IT 


staffers  are  few  in  number  and 
have  to  wear  many  hats. 

Integrating  management  of 
wired  and  wireless  LANs  has 
become  a  priority  for  many 
network  managers,  noted  John 
Miles,  vice  president  of  IT 
operations  at  Mooresville, 
N.C.-based  Lowe’s  Cos.,  which 
operates  about  1,100  home 
improvement  retail  stores. 

“Passing  [Wi-Fi]  security  to 
hardened  environments  is  def¬ 
initely  needed,”  said  Miles, 
who  hasn’t  evaluated  Alcatel’s 
product  offering. 

Smaller  vendors  began  of¬ 
fering  integrated  networking 
products  three  years  ago,  said 
Zeus  Kerravala,  an  analyst  at 
The  Yankee  Group  in  Boston. 
But  the  top  vendors  have 
started  catching  on  more  re¬ 
cently,  he  added.  For  example, 
Cisco  Systems  Inc.  jumped  on 
the  bandwagon  through  its  ac¬ 


quisition  of  Airespace  Inc.  ear¬ 
lier  this  year.  And  Nortel  Net¬ 
works  Ltd.  last  year  agreed  to 
resell  WLAN  switching  tech¬ 
nology  from  Trapeze  Net¬ 
works  Inc.  in  Pleasanton,  Calif. 

But  Richard  Webb,  an  ana¬ 
lyst  at  Infonetics  Research  in 
Boston,  said  the  process  of  inte¬ 
grating  wired  and  wireless  net¬ 
work  management  is  still  in  its 
early  stages. 

“The  whole  point  is  to  have 
converged  networks  and  per¬ 
form  the  same  set  of  criteria 
on  a  wired  or  wireless  device,” 
Webb  said.  “It’s  creating  sim¬ 
plicity  so  the  poor  network 
manager  isn’t  having  to  juggle 
two  networks.”  O  54684 
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Qwest  Gives  Up  on 
Purchase  of  MCI 

Qwest  Communications  Interna¬ 
tional  Inc.  has  abandoned  its  pur¬ 
suit  of  MCI  Inc.  Qwest  said  it  was 
no  longer  in  its  best  interest  to 
pursue  the  global  long-distance 
and  data  carrier.  MCI  said  it  ac¬ 
cepted  Verizon  Communications 
Inc.’s  $26-per-share  bid  over  a 
$30-per-share  proposal  from 
Qwest  in  part  because  of  Veri¬ 
zon's  greater  financial  stability. 


Lenovo  to  Build 
U.S.  Laboratory 

Chinese  PC  maker  Lenovo  Group 
Ltd.  plans  to  open  a  development 
center  in  North  Carolina  to  collab¬ 
orate  with  partners  -  including 
IBM,  Intel  Corp.,  Microsoft  Corp., 
Symantec  Corp.  and  LANDesk 
Software  Inc.  -  on  new  personal 
computing  technologies.  The  cen¬ 
ter  will  be  staffed  by  engineers, 
programmers  and  product  devel¬ 
opers  from  the  partner  companies. 


PalmSource  Sells 
Name,  CEO  Resigns 

PalmOne  Inc.  said  it  has  agreed  to 
pay  PalmSource  Inc.  $30  million 
for  full  rights  to  the  Palm  brand 
name,  just  one  day  after  Palm¬ 
Source  CEO  David  Nagle  re¬ 
signed.  The  Palm  brand  name  had 
been  co-owned  by  the  two  com¬ 
panies  since  PalmSource  was 
spun  off  from  Palm  Inc.  in  Octo¬ 
ber  2003.  Senior  Vice  President 
Patrick  McVeigh  was  named  in¬ 
terim  CEO  of  PalmSource. 


Best  Launches 
Hosted  CRM  Plan 

Five  years  after  it  bought  midmar¬ 
ket  business  applications  vendor 
Best  Software  Inc.,  U.K.  software 
maker  The  Sage  Group  PLC  has 
changed  Best’s  name  to  Sage 
Software.  The  renamed  unit  also 
revamped  its  portfolio  in  an  effort 
to  enter  the  hosted  CRM  business 
with  SageCRM.com,  a  rebranded 
version  of  its  Accpac  accounting 
and  sales  software. 


Clustering  Challenges 
Storage  Stronghold 

Spread  of  stand-alone  systems  prompts 
efforts  to  improve  NAS  management 


BY  LUCAS  MEARIAN 

LUSTERED  STORAGE 
technology  has 
emerged  as  a  means 
for  meeting  a  grow¬ 
ing  corporate  need  to  better 
manage  an  ever-growing  sup¬ 
ply  of  network-attached  stor¬ 
age  (NAS)  devices. 

The  technology  allows  IT  to 
consolidate  the  management 
and  increase  the  scalability 
of  NAS,  so  much  so  that  ob¬ 
servers  expect  that  it  will  one 
day  replace  the  individual 
NAS  box. 

Sonja  Erickson,  vice  presi¬ 
dent  of  technical  operations  at 
Kodak  Easy  Share  Gallery,  a 
service  of  Kodak  Imaging  Net¬ 
work  Inc.  in  Emeryville,  Calif., 
said  NAS  clustering  technolo¬ 
gy  has  already  saved  her  com¬ 
pany  hundreds  of  thousands  of 
dollars  in  personnel  costs  alone. 

“In  terms  of  staffing,  since 
we  installed  [a  NAS  cluster 
from  Isilon  Systems  Inc.]  a 
year  and  a  half  ago,  we’ve 


hired  no  additional  staff,” 
she  said.  “That’s  hundreds 
of  thousands  of  dollars  saved. 
In  terms  of  efficiency,  it  takes 
only  a  day  to  get  the  systems 
up  and  running.” 

The  Kodak  unit  uses  clus¬ 
tering  technology  from  both 
Isilon  and  Beaverton,  Ore.- 
based  PolyServe  Inc.  to  con¬ 
nect  hundreds  of  Wintel 
servers  at  Kodak  that  host  its 
online  digital  photo  image  ser¬ 
vice.  Erickson  uses  a  staff  of 
five  to  manage  more  than  a 
petabyte  of  data  on  the  servers. 

Prior  to  installing  NAS 
clusters,  Erickson  used  direct- 
attached  SCSI  arrays  that 
lacked  scalability  and  could 
take  up  to  a  month  and  a  half 
to  get  online.  In  contrast,  the 
PolyServe  boxes  take  about  a 
week  to  get  online,  she  said, 
and  Isilon’s  take  about  a  day. 

To  date,  most  of  the  major 
storage  vendors  —  Hewlett- 
Packard  Co.,  EMC  Corp.,  Hi¬ 
tachi  Data  Systems  Corp.  and 


Network  Appliance  Inc.  — 
have  released  technology  that 
can  virtualize  NAS  systems  by 
pooling  disk  capacity  behind 
NAS  engines.  All  have  said 
that  they  are  either  developing 
or  evaluating  third-party  clus¬ 
tering  technology  as  well. 

Meanwhile,  start-ups  Isilon, 
PolyServe  and  Panasas  Inc. 
in  Fremont,  Calif.,  are  already 
offering  clustering  software 
that  runs  across  Windows  and 
Linux. 


PROS  ■  Cobbles  inexpensive  com¬ 
modity  servers  together 

■  CPU  workload  is  shared 
among  boxes  for  near- 
linear  scalability 


GONS  ■  Still  a  niche  technology 

■Typically  limited  to  high- 
performance  Linux  server 
farms' 


Pushan  Rinnen,  an  analyst 
at  Gartner  Inc.  in  Stamford, 
Conn.,  suggests  that  the  clus¬ 
tering  technology  will  ease 
management  headaches  better 
than  the  older  virtualization 
technology. 

Philip  Rosedale,  founder 
and  chief  technology  officer  of 
Linden  Research  Inc.,  a  maker 
of  online  entertainment  sys¬ 
tems  in  San  Francisco,  said  he 
has  attained  “extremely  high 
I/O  throughput”  with  a  NAS 
cluster  from  Isilon  that  he  in¬ 
stalled  about  six  months  ago. 

“We  would  have  spent  a  lot 
more  money  and  would  have 
taken  a  lot  more  time  with  a 
traditional  array,”  he  said. 
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■  Simple  to  install  arid  manage 

■  Scales  well 

■  Reliable 


■  Requires  separate  manage¬ 
ment  of  each  box 

■  If  one  MAS  head  fails,  per¬ 
formance  can  he  affected  on 
the  second 


COMPARING  TECHNOLOGIES 
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■  Automatic  load  balancing 

■  Reliable 
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NetApp  Unveils  Midrange  NAS  Array 


FOLLOWING  a  trend  among 
storage  vendors  that  are  pushing 
high-end  functionality  into  lower- 
end  systems,  Network  Appliance 
last  week  introduced  two  mid¬ 
range  network-attached  storage 
boxes  that  offer  50%  better  per¬ 
formance  than  the  company’s 
highest-end  NAS  boxes. 

The  arrays  can  be  configured 
with  either  low-cosf  Serial  Ad¬ 
vanced  Technology  Attached 
(SATA)  drives  or  high-performance 
Fibre  Channel  disk  drives,  offi¬ 
cials  said. 

Cendant  Corp.,  a  $19  billion 
hotel  franchise  that  owns  Days 
Inn  Worldwide  Inc.  and  Super  8 
Motels  Inc.,  uses  20  NetApp  fil¬ 
ers  with  a  total  of  45TB  of  capac¬ 
ity.  Glenn  Harper,  director  of  data 


strategy  at  New  York-based  Cen¬ 
dant,  said  the  company  plans  to 
add  FAS3000  models  during  the 
next  year. 

The  price/performance  gains 
in  the  new  midrange  systems 
will  let  Cendant  use  fewer  high- 
end  NetApp  boxes,  such  as  the 
FAS960  and  FAS980  arrays, 
according  to  Harper. 

The  NetApp  FAS3000  series 
arrays  provide  four  times  the 
capacity  ot  previous-generation 
midrange  arrays.  The  FAS3020 
can  scale  to  50TB  and  the 
FAS3050  to  84TB. 

In  addition,  the  new  systems 
mark  the  first  time  Sunnyvale, 
Calif.-based  NetApp  is  offering  a 
RAID  6  configuration  on  a  NAS 
box.  RAID  6  allows  an  array  to 


handle  a  failure  ot  any  two  drives 
without  loss  of  data  or  downtime. 

“All  the  stuff  you  used  to  get 
on  the  midrange  line,  you’re  see¬ 
ing  that  same  technology  ported 
down  to  the  midrange,”  said 
John  Kelly,  vice  president  of 
technology  at  Jefferson  Pilot 
Financial  Insurance  Co. 

Kelly  has  NetApp  FAS800  and 
FAS900  series  boxes  spread 
among  five  campuses  in  the 
U.S.  He  plans  on  purchasing 
FAS3000  series  NAS  arrays  for 
their  “flexibility  and  for  cost  con¬ 
trol”  by  early  next  year. 

Natalya  Yezhkova,  an  analyst 
at  market  research  company  !DC, 
said  that  during  2004,  major 
storage  vendors  added  entry- 
level  and  midrange  products  that 


were  “often  accompanied  by 
more-sophisticated  software  that 
was  previously  available  only  on 
high-end  systems.” 

IDC  analyst  Brad  Nisbit  said  he 
likes  NetApp’s  mixed-drive  offer¬ 
ing.  “The  midrange  is  the  perfect 
target  right  now,"  he  said.  “We 
have  seen  most  [EMC]  Clariion 
CX  units  ship  with  at  least  one 
shelf  of  ATA  disks.  The  difference 
now  for  NetApp  is  that  they  are 
officially  embracing  ATA  technol¬ 
ogy  for  primary  storage.” 

Meanwhile,  NetApp  also 
debuted  two  V-Series,  formerly 
6-Series,  virtualization  gateway 
devices  -  the  NetApp  V3020  and 
V3050  -  based  on  the  new 
FAS3000  series.  The  gateways 
can  use  HP,  EMC  or  IBM  disk 
subsystems  as  back-end  storage. 

-  Lucas  Mearian 
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Microsoft  Courts  Mainframe 
Shops,  Pushes  Windows  Use 

Vendor  holds  first  migration  event; 
some  users  tout  cost  benefits  of  switch 


BY  CAROL  SLIWA 

wapping  out  big-iron 
boxes  in  favor  of  Win¬ 
dows  servers  may  not 
be  the  hottest  of  IT 
trends.  But  at  its  first  Main¬ 
frame  Migration  Conference 
last  week,  Microsoft  Corp.  said 
it’s  making  steady  progress 
with  its  efforts  to  court  main¬ 
frame  users. 

Three  mainframe-to-Win- 
dows  converts  at  the  Chicago 
event  pointed  to  expected  cost 
reductions,  one  of  the  main 
benefits  that  Microsoft  has 
been  touting  since  it  forged 
the  Mainframe  Migration  Al¬ 
liance  with  Micro  Focus  Inter¬ 
national  Ltd.  in  April  2004. 

Microsoft  said  the  alliance 
now  includes  over  50  software 
vendors,  systems  integrators 
and  other  companies  that  offer 
products  and  services  aimed 
at  helping  users  migrate  off 
mainframes.  The  vendor  not¬ 
ed  that  the  conference  drew 
more  than  200  attendees. 

But  Dale  Vecchio,  an  analyst 
at  Gartner  Inc.,  said  users  are 
more  likely  to  switch  to  Unix 
than  Windows  if  they  move 
off  the  mainframe.  He  rated 
Microsoft’s  chances  of  making 
a  big  impact  on  mainframe 
users  at  less  than  20%.  “It’s  a 
completely  different  culture,” 
Vecchio  said.  “Shifting  from  a 
multitasking  mainframe  envi¬ 
ronment  running  mixed  batch 
and  online  [jobs]  to  Windows 
is  a  big  shift.” 

Some  mainframe  users  were 
ripe  to  make  a  change,  though. 
For  example,  Glen  MacGregor, 
assistant  vice  president  of 
business  systems  at  Lombard 
Canada  Ltd.  in  Toronto,  said 
the  firm’s  IT  department  pro¬ 
posed  replacing  its  IBM  main¬ 
frame  at  budget  time  last  year. 
Lombard’s  analysis  showed 
that  IBM’s  z/OS  operating  sys¬ 
tem  and  various  mainframe 
tools  would  cost  about  $1  mil¬ 


lion  per  year  more  than  run¬ 
ning  a  Windows-based  envi¬ 
ronment  would,  he  said. 

So  the  company  hired  Cratos 
Technology  Solutions  Inc.  in 
Oakville,  Ontario,  to  migrate 
4,800  programs  running  on  the 
mainframe  to  Windows.  Cratos 
CEO  Andrew  Wickett  said 
92.3%  of  the  Cobol  code  re¬ 
mained  intact  when  the  first 
application  was  migrated  using 
Micro  Focus  tools. 


Aims  to  fill  IT 
vacancies  as  baby 
boomers  retire 

BY  THOMAS  HOFFMAN 

IBM  is  trying  to  convince 
growing  numbers  of  young 
engineers  that  the  mainframe 
isn’t  dead  yet. 

For  example,  thousands  of 
college  students  have  partici¬ 
pated  in  an  IBM-created  main¬ 
frame  training  and  curriculum 
program  that’s  aimed  at  gen¬ 
erating  interest  and  building 
skills  in  the  field  as  baby 
boomer  IT  workers  near 
retirement  age. 

Since  its  launch  two  years 
ago,  more  than  130  colleges 
and  universities  worldwide 
have  joined  the  IBM  Academic 
Initiative.  Under  the  program, 
IBM  helps  schools  develop 
and  share  mainframe-related 
curricula,  said  Mike  Bliss, 
director  of  zSeries  technical 
support  and  marketing  at  IBM. 

Some  students  say  the  pro¬ 
gram  is  awakening  a  previous¬ 
ly  unknown  interest  in  main¬ 
frame  technology.  “I  wouldn’t 
have  been  interested  in  the 
mainframe  [much]  at  all  if  I 
hadn’t  been  exposed  to”  the 
IBM  program,  said  Joshua 
Smith,  a  24-year-old  program- 


The  company  plans  to  do  a 
“grand  slam”  conversion  next 
March,  MacGregor  said.  He 
added  that  Lombard  expects  a 
return  on  its  investment  in  the 
first  year  after  the  switch. 

Willem  Gorter,  a  Paris-based 
program  manager  at  AtosEuro- 
next,  a  joint  venture  between 
the  Euronext  trading  exchange 
and  IT  services  firm  Atos  Ori¬ 
gin  SA,  said  the  biggest  costs 
associated  with  mainframes 
are  the  salaries  of  the  workers 
needed  to  run  them. 

AtosEuronext’s  Amsterdam 
office  recently  moved  six  ap- 


mer/analyst  at  The  Timken 
Co.,  a  Canton,  Ohio-based 
bearings  manufacturer. 

While  a  senior  mathematics 
major  at  Canton-based  Mal¬ 
one  College  in  2003,  Smith 
took  an  assembler  program¬ 
ming  course  offered  through 
the  IBM  program.  The  course 
also  contributed  to  his  landing 
a  job  at  Timken. 

Prior  to  taking  the  class, 
said  Smith,  “my  opinion  of  the 
mainframe  was  that  it  was  a 
dying  breed.”  But  during  the 
program,  a  trusted  professor 
told  Smith  that  mainframes 


AT  A  GLANCE 


IBM  Academic 
Initiative 

WHAT  IT  IS:  A  program  the  ven¬ 
dor  launched  two  years  ago  to 
encourage  college  students  to 
study  mainframe  computing. 

WHAT  IT  OFFERS:  The  initiative 
lets  students  and  faculty  at  more 
than  130  universities  and  colleges 
worldwide  access  mainframes  for 
lab  work.  IBM  also  works  with 
colleges  to  develop  curricula. 

WHO’S  INVOLVED:  Thousands 
of  computer  science  students 
have  already  participated.  IBM 
has  a  goal  of  putting  20,000  peo¬ 
ple  through  the  program  by  2010. 


H  Shifting  from 
a  multitasking 
mainframe  environ¬ 
ment  running  mixed 
batch  and  online 
pobs]  to  Windows 
is  a  big  shift. 

DALE  VECCHIO,  ANALYST, 

GARTNER  INC. 

plications,  including  securities 
referential  data  administration 
for  the  Amsterdam  exchange, 


are  still  very  much  in  use  and 
that  employers  continue  to  re¬ 
cruit  workers  with  those  skills. 

For  instance,  American  Fi¬ 
delity  Assurance  Co.  still 
processes  roughly  75%  of  its 
workload  on  mainframes,  said 
John  Schille,  CIO  at  the  Okla¬ 
homa  City-based  company. 
“We  would  be  interested  in 
supporting  university  educa¬ 
tion  geared  toward  training  in 
this  environment  to  supple¬ 
ment  staff  replacement  needs, 
specifically  upcoming  retire¬ 
ment  issues,”  Schille  said. 

Preparing  for  the  Future 

Schille  isn’t  alone.  Over  the 
past  few  years,  LexisNexis 
Group,  a  legal  research  pro¬ 
vider  in  Dayton,  Ohio,  has 
hired  a  handful  of  entry-level 
IT  workers  with  mainframe-re¬ 
lated  experience,  said  Allan 
McLaughlin,  senior  vice  presi¬ 
dent  and  chief  technology  offi¬ 
cer.  “The  potential  retirement 
[of]  some  of  our  very  specific 
mainframe  talent  keeps  me  up 
at  night,”  he  said. 

IBM  isn’t  expecting  a  mass 
exodus  of  mainframe  talent, 
said  Bliss.  “But  we  do  need  to 
get  some  younger  folks  started 
to  build  those  skills,”  particu¬ 
larly  since  it  takes  a  few  years 
for  IT  workers  to  embrace  the 


IBM  Plugs  Big  Iron  to  the  College  Crowd 


from  a  mainframe  to  two  clus¬ 
tered  single-processor  servers 
running  Windows.  The  overall 
migration  also  included  a  shift 
of  its  core  clearing  and  cash 
trading  applications  to  a 
Hewlett-Packard  NonStop  sys¬ 
tem  in  Paris  and  its  derivatives 
trading  systems  to  Sun  Solaris 
servers  in  London. 

The  company  calculated 
that  it  would  have  spent  close 
to  $454,000  per  month  if  it 
had  kept  the  remaining  six  ap¬ 
plications  on  the  mainframe, 
Gorter  said.  Running  them  on 
Windows  will  cost  $88,000 
per  month,  with  the  savings 
coming  largely  from  the 
elimination  of  30  mainframe 
staffers.  Only  six  are  needed  to 
support  the  Windows  systems, 
and  they  can  also  do  other 
tasks,  Gorter  said.  ©  54678 


complexity  of  the  environ¬ 
ment,  he  said. 

According  to  Bliss,  last  Oc¬ 
tober  IBM  set  a  goal  of  putting 
20,000  people  through  the 
program  by  the  end  of  2010. 

Earl  Rodd,  an  assistant  pro¬ 
fessor  of  computer  science  at 
Malone  College,  said  that  the 
school  got  involved  in  the  IBM 
program  in  early  2003  because 
mainframes  are  a  “significant” 
part  of  corporate  computing. 
“Our  [computer  science]  pro¬ 
gram  is  intentionally  broad  in¬ 
stead  of  deep  in  order  to  ex¬ 
pose  people  to  a  lot  of  things 
they  probably  haven’t  seen  be¬ 
fore,”  he  added. 

Chris  Baran,  a  sophomore 
computer  science  major  at 
Clarkson  University  in  Pots¬ 
dam,  N.Y.,  who  is  interning  at 
IBM  this  summer,  is  active  in 
the  New  Hire  forum,  a  group 
of  IBM  Academic  Initiative 
students  and  customers  that 
is  trying  to  interest  students 
in  studying  the  mainframe. 

The  group  is  planning  to 
launch  a  z/OS  programming 
contest  in  August  in  which 
student  participants  will  have 
access  to  mainframes  at  Marist 
College  in  Poughkeepsie,  N.Y. 
“The  main  focus  of  our  contest 
is  to  get  students  excited  about 
working  with  the  mainframe,” 
said  Baran.  “We’re  trying  to  get 
people  to  realize  that  main¬ 
frames  are  not  dead.”  ©  54671 


All  IT  Systems 


One  Service  Team 


For  multi-vendor,  cross -platform  service  and  support ,  Fujitsu  is  the  one . 


From  mainframes  to  servers,  notebooks, 
and  Tablet  PCs,  no  other  company  provides 
the  full  spectrum  of  services  to  support 
business-critical  computing  like  Fujitsu. 

In  addition  to  our  own  products,  we  support 
a  variety  of  platforms  such  as  Sun™,  IBM®, 
and  HR  plus  OS/390®,  UNIX®,  Windows® 
and  Linux  environments.  We  also  provide 
services  that  improve  the  operation 
of  your  existing  IT  investments  and 
drive  down  costs.  So,  if  it’s 
critically  important  to  a  CIO’s  IT 
infrastructure,  we  service  it. 


With  more  than  30  years  of  direct 
experience  collaborating  with  our  customers 
and  aligning  their  IT  and  business  objectives, 
we’ve  learned  what  it  takes  to  maintain  a 
wide  variety  of  complex,  mission-critical  IT 
environments — and  deliver  a  higher  level  of 
service,  for  multi-vendor;  cross-platform 
environments.  We  provide  a  single  point  of 
contact  and  full  accountability  to 
reduce  the  complexity  and  cost  of 
support,  streamlining  operations  to 
offer  greater  business  value. 


To  learn  more  reasons  why  CIOs  entrust  their  IT  systems  to  Fujitsu,  visit 

us.fujitsu.com/computers/services  or  call  I  -800-83 1  -3 1 83. 
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Novell  Posts  Loss 
On  1%  Sales  Growth 


Novell  Inc.  said  significant  invest¬ 
ments  made  to  reposition  the 
company  led  to  a  $15.8  million 
second-quarter  loss.  Sales  rose 
slightly  in  the  quarter. 


Sueltz  Resigns  From 
Salesforce.com  Post 

Patricia  Sueltz  has  resigned  from 
Salesforce.com  Inc.  just  over  a 
year  after  the  hosted  CRM  pro¬ 
vider  poached  her  from  Sun  Mi¬ 
crosystems  Inc.  to  oversee  its 
marketing  and  operations.  Sueltz 
joined  Salesforce.com  several 
months  before  an  initial  public 
offering  that  left  Salesforce.com 
with  a  market  valuation  of  more 
than  $1  billion.  She  previously 
headed  Sun’s  services  group. 


AT&T  Nabs  Deals 
Worth  S14.5M 

AT&T  Corp.  has  won  two  con¬ 
tracts  totaling  $14.5  million  from 
American  Builders  &  Contractors 
Supply  Co.  (ABC)  and  Kaman 
Corp.  Under  the  $8.5  million  pact 
with  ABC,  a  wholesale  distributor 
of  roofing  and  siding  materials, 
AT&T  will  provide  an  IP  virtual 
private  network.  The  $6  million 
deal  with  Kaman,  a  maker  of  mili¬ 
tary  and  aerospace  equipment, 
calls  for  AT&T  to  provide  data  and 
voice  networking  services. 


MCI  Evaluates  Data 
Security  Options 

MCI  Inc.  is  evaluating  new  corpo¬ 
rate  security  technologies  follow¬ 
ing  the  theft  of  a  notebook  com¬ 
puter  containing  personal  infor¬ 
mation,  including  Social  Security 
numbers,  of  about  16,500  current 
and  former  employees.  The  miss¬ 
ing  data  was  stored  on  a  laptop 
that  was  stolen  last  month  from  a 
car  parked  in  the  home  garage  of 
an  MCI  financial  analyst. 


Insider  Threats 

Security  experts  cite  need  for  strong 
internal  controls  to  prevent  data  thefts 


BY  JAIKUMAR  VIJAYAN 

he  recent  rash  of 
data  compromises 
at  large  companies, 
several  of  them 
caused  by  insiders,  highlights 
the  need  for  IT  managers  to 
develop  tight  internal  controls 
for  monitoring  and  enforcing 
compliance  with  corporate 
data-usage  policies. 

But  the  trend  among  com¬ 
panies  to  open  up  their  net¬ 
works  to  suppliers,  contrac¬ 
tors,  business  partners  and 
customers  is  making  that  an 
increasingly  difficult  task  to 
accomplish,  according  to  secu¬ 
rity  analysts. 

Just  last  week,  Bank  of 
America  Corp.  disclosed  that 
information  on  about  60,000 
of  its  customers  had  been 
stolen  by  a  New  Jersey-based 
data-theft  ring  that  also 
allegedly  took  electronic 
account  records  from  three 
other  banks.  The  ring,  which 
police  said  included  eight 


employees  from  the  four 
banks,  is  accused  of  systemati¬ 
cally  stealing  account  data  on 
a  total  of  nearly  700,000  cus¬ 
tomers  [QuickLink  54542]. 

Both  the  bank  thefts  and  a 
similar  incident  involving  data 
aggregator  ChoicePoint  Inc. 
that  came  to  light  earlier  this 
year  were  allegedly  perpetrat¬ 
ed  by  end  users  who  had  legit¬ 
imate  access  to  the  data  they 
took,  said  Michael  Rasmussen, 
an  analyst  at  Forrester  Re¬ 
search  Inc. 

“This  kind  of  breach  poses 
a  much  bigger  threat  than  the 
traditional  hacker,”  Rasmussen 
said.  That’s  especially  true  for 
large  enterprises  with  global 
operations  and  suppliers,  as 
well  as  offshore  outsourcing 
relationships,  he  added. 

Kim  Milford,  information 
security  officer  at  the  Univer¬ 
sity  of  Rochester  in  New  York, 
said  she  thinks  the  best  way  to 
address  insider  security  issues 
is  to  establish  an  ongoing 


Mount 

awareness  program.  Such  a 
program  needs  to  be  tailored 
for  different  groups,  including 
IT  staffers,  end  users,  corpo¬ 
rate  executives  and  external 
partners,  she  said. 

Also  crucial  is  the  need  for 
administrative  controls,  such 
as  job  descriptions  that  spell 
out  security  responsibilities, 
acceptable  data-use  guidelines 
and  confidentiality  agree¬ 
ments,  Milford  said.  “IT  man¬ 
agement  tends  to  throw  tech- 


Mitigating  Insider 
Security  Threats 

SET  AND  ENFORCE  password 
and  remote  access  policies. 

USE  configuration  management 
techniques  to  help  detect  mali¬ 
cious  code  in  systems. 

FOLLOW  procedures  for  system 
logging  and  monitoring  and  for 
data  backup  and  recovery. 

CREATE  internal  processes  for 
reporting  concerns  about  the 
behavior  of  employees. 

SOURCE:  REPORT ISSUEO  BY  THE 
U.S.  SECRET  SERVICE  AND  THE  CERT 
COORDINATION  CENTER 


nical  controls  at  security  ex¬ 
posures  instead  of  thinking  of 
the  good  old-fashioned  human 
factors,”  she  noted. 

Companies  also  need  to 
have  good  password,  user  ac¬ 
count  and  configuration  man¬ 
agement  practices,  as  well  as 
processes  for  disabling  net¬ 
work  access  when  employees 
are  terminated,  according  to  a 
report  issued  May  16  by  the 
U.S.  Secret  Service  and  the 
CERT  Coordination  Center  at 
Carnegie  Mellon  University. 

In  addition,  formal  processes 
are  needed  for  handling  em¬ 
ployee  grievances  and  moni¬ 
toring  reactions  to  events  such 
as  workers  being  reprimanded 
or  passed  over  for  promotions, 
the  report  said.  Those  findings 
are  based  on  an  investigation 
of  49  cases  of  insider  attacks 
via  computer  systems  between 
1996  and  2002. 

“In  92%  of  the  cases,  a  nega¬ 
tive  work-related  event  trig¬ 
gered  the  insider  action,”  said 
Matt  Doherty,  a  special  agent 
in  charge  of  the  Secret  Ser¬ 
vice’s  National  Threat  Assess¬ 
ment  Center.  The  good  news, 
though,  is  that  most  of  the  at¬ 
tacks  were  planned  and  not 
impulsive  acts,  which  are  hard 
to  prevent,  he  said.  ©  54681 


Start-ups  Push  Apps  for 
Tracking  Corporate  Ideas 


BY  JAIKUMAR  VIJAYAN 

Bright  Idea  Inc.,  one  of  several 
small  vendors  offering  soft¬ 
ware  for  managing  corporate 
innovations,  this  week  will  in¬ 
troduce  a  hosted  service  de¬ 
signed  to  help  users  collect 
and  prioritize  new  ideas  and 
then  track  their  development. 

The  Web-based  service  is 
aimed  at  midsize  companies 
and  divisions  of  larger  organi¬ 
zations  that  are  looking  to 
source  ideas  from  wider 
groups  of  employees  than  they 
usually  rely  on,  said  Matthew 
Greeley,  president  of  New 
York-based  Bright  Idea.  Com¬ 
panies  could  use  the  service 
in  product  development  or  as 
part  of  business  process  im¬ 
provements  and  cost-cutting 
activities,  he  added. 


In  concept,  innovation  man¬ 
agement  tools  like  the  ones 
developed  by  Bright  Idea  are 
similar  to  product  life-cycle 
management  (PLM)  applica¬ 
tions  in  that  they  give  compa¬ 
nies  a  central  repository  for 
gathering  and  managing  new 
ideas,  said  Navi  Radjou,  an  an¬ 
alyst  at  Forrester  Research  Inc. 

Radjou  noted  that  the  soft¬ 
ware  provides  workflow  and 
analytics  capabilities  for  iden¬ 
tifying,  categorizing  and  rank¬ 
ing  good  ideas  and  routing 
them  to  the  right  people.  “In  a 
sense,  PLM  takes  over  where 
idea  management  leaves  off,” 
he  said,  predicting  that  some 
some  of  the  companies  in  the 
market  may  eventually  be 
bought  by  PLM  vendors. 

Robert  Bosch  Tool  Corp., 


a  maker  of  power  tools  in 
Mount  Prospect,  Ill.,  is  using 
Bright  Idea’s  innovation  man¬ 
agement  suite  to  consolidate 
ideas  from  across  its  different 
product  groups.  The  company 
recently  conducted  a  two- 
week  campaign  soliciting 
ideas  from  all  of  its  employees 
on  how  to  improve  one  of  its 
products,  said  Peter  Neumann, 
Bosch’s  innovation  manager. 

Creating  a  Wish  List 

Bright  Idea’s  software  allowed 
employees  to  submit  their 
ideas  to  a  central  database, 
where  143  responses  were  vet¬ 
ted  by  marketing  and  engi¬ 
neering  teams  and  assigned 
ranks  based  on  how  good  the 
ideas  were.  “Some  of  the  top 
ideas  were  integrated  into  the 
marketing  wish  list  for  the 
next  generation  of  the  prod¬ 
uct,”  Neumann  said. 

“Idea  and  innovation  man¬ 
agement  software  tools  can 


have  a  fairly  high  impact,”  said 
Jonathan  Spira,  CEO  of  Basex 
Inc.,  a  New  York-based  con¬ 
sulting  firm.  “They  have  not 
yet  been  widely  adopted  sim¬ 
ply  because  they  are  not  yet 
widely  known.” 

Almost  all  of  the  vendors 
selling  such  tools  are  small, 
Radjou  said.  Bright  Idea  — 
which  until  recently  was  called 
General  Ideas  Inc.  —  is  a  15- 
person  firm,  but  it  counts 
Bosch,  Bristol-Myers  Squibb 
Co.,  Honeywell  International 
Inc.  and  Hallmark  Cards  Inc. 
among  its  clients.  Boston- 
based  Imaginatik  and  Carlsbad, 
Calif.-based  Akiva  Corp.  sell 
similar  software  as  well. 

Bright  Idea  already  offers 
packaged  software  that  starts 
at  $65,000  for  a  server  license 
and  an  additional  $60,000  for 
integration  and  customization. 
The  hosted  service  starts  at  a 
monthly  fee  of  $49  per  user, 
Greeley  said.  ©  54682 


Even  if  everyone 
knew  about  the 
problem,  would 
anyone  know  the 
solution? 

As  every  aspect  of  business 
migrates  to  the  Web,  sensitive 
information  once  sheltered  is 
now  exposed.  Because  browser- 
based  applications  pass  through 
the  entire  security  perimeter. 

If  that  doesn't  wrinkle  your 
brow,  in  a  recent  study  70  percent 
of  companies  reported  security 
intrusions,  with  an  average  of 
136  annually. 

The  only  real  answer  is  a  solu¬ 
tion  that  knows  exactly  what 
your  application's  traffic  should 
look  like,  and  blocks  everything 
else.  A  comprehensive  solution 
that  gives  you  complete  control 
over  who  gets  access  from  where 
and  when,  that  can  actually 
identify  and  filter  application- 
level  cyber  attacks. 

It's  application  traffic  man¬ 
agement  taken  to  the  next  level. 
Something  that  could  only  have 
come  from  a  deep  understanding 
of  both  the  network  and  the 
application.  Which  is  why  only  F5 
can  offer  it.  For  details  on  this 
revolutionary  architecture,  includ¬ 
ing  our  TrafficShield,M  Application 
Firewall  and  FirePass®  SSL  VPN, 
visit  www.f5.com/cwbank  or  cail 
866-885-9256. 
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Hitachi  Replacing  PCs 
With  Secure  Thin  Clients 

TOKYO 

Hitachi  ltd.,  one  of  Japan’s 

biggest  electronics  companies, 
plans  to  replace  thousands  of 
employee  PCs  in  that  country  with  its 
thin-client  devices  because  of  data  se¬ 
curity  concerns,  officials  said  at  a  news 
conference  last  week. 

Over  the  next  two  years,  the  compa¬ 
ny  will  roll  out  16,000  thin  clients  in¬ 
ternally,  IT  chief  Kazuo  Furukawa  said. 
“Security  is  becoming  an  extremely  se¬ 
vere  problem,  and  passwords  are  no 
longer  enough,”  he  said.  Instead  of  re¬ 
lying  on  passwords,  Hitachi’s  thin 
clients  authenticate  users  via  a  plug-in 
Universal  Serial  Bus  device  that  acts 
as  a  key. 

The  move  to  diskless  computers  fol¬ 
lows  a  trial  deployment  of  2,000  thin 
clients  that  started  in  February.  Even¬ 
tually,  Hitachi  may  replace  the  desktop 
and  notebook  PCs  of  virtually  all  of  its 
242,000  employees  in  Japan,  according 
to  Furukawa. 

Hitachi  also  plans  to  sell  its  thin- 
client  desktops  and  notebooks  — 
which  use  the  Windows  XP  Embedded 


Mi 


operating  system  and  Intel  Corp.’s 
Celeron  processors  —  to  other  compa¬ 
nies  in  Japan,  starting  in  the  second 
half  of  this  year. 

■  PAUL  KALLENDER,  IDG  NEWS  SERVICE 

Pantech  Gives  Mobile 
Phones  a  New  Shape 

TOKYO 

|  ost  cell  phones  are  shaped 
like  candy  bars  or  clamshells. 

I  But  South  Korean  vendor  Pan¬ 
tech  Co.  plans  to  change  that  in  June 
when  it  starts  selling  mobile  phones 
that  slide  open  —  with  a  twist. 

Pantech  said  last 
week  that  its  PT-S110 
and  PT-K110 
phones  have  2-in. 
portrait-format 
color  screens  that 
slide  up  to  reveal 
their  keypads. 

The  displays  can 
then  be  twisted  90  de¬ 
grees,  converting  them 
to  a  landscape  format 
and  giving  the  phones 
Pantech’s  PT-  a  T-shape,  the  Seoul- 
K110  cell  phone  based  company  said. 


The  new  phones  include  a  music 
player,  a  2-megapixel  digital  camera,  an 
electronic  dictionary,  a  text-to-speech 
function  and  an  optical  character 
recognition  scanner. 

The  phones  will  be  sold  only  in 
South  Korea  for  a  retail  price  of  about 
500,250  won  ($500  U.S.),  Pantech  said. 
■  PAUL  KALLENDER,  IDG  NEWS  SERVICE 


U.K.  Retailer  Moves  to 
VoIP,  Converged  Network 

Over  the  next  five  and  a  half 
years,  London-based  retailer 
Marks  and  Spencer  Group  PLC 
plans  to  implement  a  voice-over-IP 
(VoIP)  system  at  its  U.K.  stores  and  a 
converged  voice/data  IP  WAN  for  all 
of  its  international  operations,  the 
company’s  networking  contractor 
disclosed  earlier  this  month. 

Cable  &  Wireless  PLC  also  an¬ 
nounced  the  extension  of  its  network 
management  contract  with  Marks  and 
Spencer  until  the  end  of  2011. 

The  London-based  international 
network  carrier  explained  that  it  plans 
to  continue  to  manage  the  retailer’s 
existing  voice  and  data  networks  while 
it  works  to  move  all  of  the  communica¬ 
tions  traffic  onto  a  single  IP  network 
and  deploy  VoIP  in  the  U.K. 
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Briefly  Noted 

France  Telecom  SA  last  week 
completed  its  buyout  of  Amster¬ 
dam-based  network  operator 
Equant  NV.  The  price  tag,  including 
debt  assumed  by  Paris-based 
France  Telecom,  was  1.26  billion 
euros  ($1.58  billion  U.S.).  Equant 
provides  data  communications  ser¬ 
vices  to  users  in  220  countries  and 
territories  [QuickLink  52194]. 


Swiss  International  Air  Lines  Ltd. 
in  Basel  this  month  announced  the 
appointment  of  Frank  Meyer,  34,  as 
executive  vice  president  and  CIO, 
effective  June  1.  Meyer,  previously 
head  of  systems  planning  at  the  air¬ 
line,  succeeds  retiring  CIO  Robert 
Borntrager. 


Network  Healthcare  Holdings  Ltd. 
(Netcare),  the  largest  for-profit 
health  care  operation  in  South 
Africa,  will  spend  100  million  rand 
($15.3  million)  over  the  next  two 
years  on  an  ERP  system  based  on 
SAP  AO’s  software,  the  vendor  an¬ 
nounced  last  week.  Johannesburg- 
based  Netcare  runs  62  hospitals, 
56  clinics  and  80  pharmacies. 


Governments  Plan  Data  Grid  Projects 


BY  PATRICK  THIBODEAU 

Some  governments  and  not- 
for-profit  organizations  such 
as  hospitals  are  beginning  to 
look  at  data  grid  technology  as 
a  means  to  improve  services, 
lower  operating  costs  and 
spur  economic  development. 

Separate  data  grid  plans  in¬ 
volving  hospitals,  schools  and 
municipal  agencies  in  Cleve¬ 
land  and  within  Singapore’s 
government  were  announced 
this  month.  Such  efforts  will 
likely  take  years  to  reach 
fruition.  But  that  doesn’t  stop 
people  like  Vincent  Miller, 
CIO  at  Cleveland-based 
MetroHealth  System,  from 
seeing  their  potential. 

“Wouldn’t  it  be  neat  if  we 
could  tie  ourselves  together  as 
part  of  a  regional  health  orga¬ 
nization?”  Miller  said.  “From 
a  conceptual  perspective,  it 
makes  a  lot  of  sense.” 


IBM,  under  the  new  Eco¬ 
nomic  Development  Grid  ini¬ 
tiative,  has  started  working 
with  a  regional  group  called 
OneCleveland  to  develop  data 
grids  in  that  city.  Miller  said  a 
plan  for  a  grid  connecting  area 
hospitals  is  in  the  early  discus¬ 
sion  stages. 

How  They  Work 

A  data  grid  is  similar  in  con¬ 
cept  to  a  compute  grid.  But 
instead  of  tapping  CPU  re¬ 
sources  from  different  systems 
to  improve  computational  effi¬ 
ciency,  data  grids  use  a  mid¬ 
dleware  layer  and  metadata 
framework  to  give  connected 
end  users  a  centralized  view 
of  information,  no  matter 
where  it’s  stored  on  a  grid. 

Vendors  such  as  Avaki 
Corp.,  which  was  acquired  this 
month  by  Sybase  Inc.,  offer 
technology  for  developing 


data  grids.  But  thus  far,  most 
grids  have  been  deployed  in¬ 
ternally  by  businesses  for 
pooling  research  or  financial 
data.  Creating  a  data  grid  that 
spans  multiple  organizations 
is  relatively  new,  said  Jonathan 
Eunice,  an  analyst  at  Illumina- 
ta  Inc.  in  Nashua,  N.H. 

Singapore  has  set  up  a  CPU 
grid  for  developers  of  comput¬ 
er  games  aimed  at  the  Asian 
market  that  they  can  use  to 
test  and  deploy  their  products. 
Now  the  government  is  work¬ 
ing  with  the  country’s  con¬ 
struction  industry  and  the  Na¬ 
tional  University  of  Singapore 
on  a  multiyear  effort  to  devel¬ 
op  a  data  grid.  Sun  Microsys¬ 
tems  Inc.  is  among  the  ven¬ 
dors  involved  in  the  project. 

Khoong  Hock  Yun,  assistant 
CEO  at  the  Infocomm  Devel¬ 
opment  Authority  in  Singa¬ 
pore,  said  last  week  that  the 


plan  calls  for  a  grid  that  allows 
government  agencies,  con¬ 
struction  firms,  suppliers  and 
specialty  contractors  to  ex¬ 
change  data  and  files. 

Yun  said  the  government 
wants  to  help  construction 
firms  become  more  efficient 
and  reduce  building  costs. 

The  overarching  goal  is  to  help 
make  Singapore  a  more  attrac- 

n 

IBM  and  OneCleveland  have 
several  potential  data  grids 
in  mind,  in  addition  to  a  pro¬ 
posed  health  care  project: 

■  A  K-12  schools  outreach 
grid  would  coordinate  the  shar¬ 
ing  of  information  among  local 
schools  and  universities. 

■  A  higher-education  colab- 
orative  grid  would  support  broad 
data  sharing  among  colleges. 

■  A  public  information  grid 

would  link  municipal  agencies. 


tive  business  location  to  multi¬ 
national  companies,  he  added. 

Enabling  the  data  sharing 
requH  overcoming  technical 
hurdles,  such  as  developing 
security  capabilities,  inter¬ 
faces  between  systems  and 
rules  that  ensure  regulatory 
compliance.  But  those  in¬ 
volved  say  the  bigger  chal¬ 
lenge  is  organizational. 

“Many  of  the  companies  by 
nature  don’t  want  to  collabo¬ 
rate,”  Yun  said.  He  added  that 
he  has  succeeded  in  getting  a 
core  group  of  private-sector 
firms  to  participate  in  the 
project.  But  doing  so  hasn’t 
been  easy,  Yun  acknowledged. 

Scot  Rourke,  president  of 
OneCleveland,  which  operates 
a  broadband  networking  ser¬ 
vice  for  nonprofits  and  univer¬ 
sities,  also  sees  organizational 
issues  as  critical.  “It’s  less  of  a 
technology  challenge  than  it  is 
coordinating  the  various  needs 
and  interests  of  the  partici¬ 
pants,”  he  said.  ©  54680 
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Blogging  Software  Aids 
PackageTracking  Project 


Tools  coordinate 
development  in 
different  countries 


BY  THOMAS  HOFFMAN 

When  eCourier 
Ltd.  developed 
an  innovative 
online  package¬ 
tracking  system  for  its  cus¬ 
tomers  last  summer,  it  had  to 
coordinate  work  among  front- 
and  back-end  developers  in 
Italy,  Germany  and  the  U.K. 

But  instead  of  using  tradi¬ 
tional  project  management 
software  to  monitor  the  proj¬ 
ect,  the  developers  used 
weblogging  tools  from  Provi¬ 
dence,  R.I.-based  Traction 
Software  Inc.  to  generate  proj¬ 
ect  updates  and  provide  a 
record  of  the  work. 

A  small  but  growing  number 
of  IT  organizations  are  begin¬ 
ning  to  use  blogging  tools  for 
those  same  purposes,  say  in¬ 
dustry  experts.  “They’re  really 
starting  to  pick  up  in  populari¬ 
ty”  among  project  teams,  said 
Jack  Duggal,  a  principal  at  Pro¬ 
jectize  Group,  a  Simsbury, 
Conn.-based  project  manage¬ 
ment  consulting  firm. 

The  eCourier  package¬ 
tracking  system,  supported  by 
Global  Positioning  System 
software  contained  in  each 
courier’s  handheld  device, 
went  live  last  October.  It  al¬ 
lows  customers  like  Paul 
Smith,  a  U.K.-based  clothier, 
to  log  onto  eCourier’s  Web 
site  to  see  where  a  courier 
picked  up  a  package,  where  it’s 
being  dropped  off  and  where 
the  package  is  at  any  time. 

For  eCourier,  a  London- 
based  express  courier  compa¬ 
ny,  using  blogging  tools  to  help 
develop  the  Java-based  map¬ 
ping  system  made  sense  for 
several  reasons,  said  Jay  Breg- 
man,  eCourier’s  co-founder 
3nd  technology  director.  “I 
wanted  to  cut  costs  as  much  as 
possible,  so  I  couldn’t  afford  to 
be  traveling  from  Italy  to  Ger¬ 
many  to  the  U.K.”  to  manage 


the  project  teams,  he  said. 

At  a  cost  of  roughly  $1,000 
for  a  five-person  license,  the 
blogging  tools  from  Traction 
Software  more  than  paid  for 
themselves  in  travel  savings 
alone,  said  Bregman.  “And 
instead  of  playing  a  massive 
game  of  telephone 
[tag]  between  [devel¬ 
opers],  this  gave  us  a 
source  of  record,”  he 
said. 

Users  of  Traction 
Software’s  blogging 
tools  can  scroll 
through  a  list  of  proj¬ 
ects  and  determine 
who  posted  an  update 
to  a  project  and  when, 
said  Jordan  Frank,  the  ven¬ 
dor’s  vice  president  of  mar¬ 
keting  and  business  de¬ 
velopment.  Project  activities 
can  be  prioritized,  and  project 
managers  can  see  when  each 
phase  has  been  completed. 

The  software  can  also  be 
used  like  wikis,  which  allow 


all  of  the  information  to  be 
edited  by  users  who  have  per¬ 
mission  to  do  so,  said  Frank. 
Unlike  blogs,  wikis  allow  visi¬ 
tors  to  edit  a  Web  page  in  ad¬ 
dition  to  making  their  own 
postings. 

Although  Bregman  raved 

about  the  low  cost  and 
benefits  of  using  blog¬ 
ging  software,  one 
consultant  questioned 
why  teams  wouldn’t 
simply  use  free 
blogging  software. 

“Why  not  do  it  for 
free  with  open-source 
software  and  get  the 
same  benefits  of  hav¬ 
ing  a  forum  for  discus¬ 
sion?”  said  David  L.  Ross,  a 
project  management  consul¬ 
tant  at  David  L.  Ross  and  As¬ 
sociates  in  New  York. 

Duggal  sees  it  differently.  “If 
the  software  only  cost  them 
$1,000,  it’s  well  worth  the  func¬ 
tionality”  and  support  options, 
he  said.  O  54663 


Continued  from  page  1 

Blogs 

who  heads  IT  at  Palo  Alto, 
Calif.-based  law  firm  Tomlin¬ 
son  Zisko  LLP.  Scoble  said  last 
week  that  he  blogs  mostly 
about  technical  issues,  seeking 
product  recommendations 
from  other  users  and  even 
writing  about  customer  sup¬ 
port  snafus. 

The  blog,  which  he  started 
about  18  months  ago,  has 
served  as  a  good  way 
to  record  his  work  and 
solicit  advice,  Scoble 
said.  There’s  also 
some  personal  satis¬ 
faction  involved.  “If  I 
can  help  a  couple  of 
people  with  experi¬ 
ences  that  I’ve  had, 
that’s  great,”  he  said. 

And  Scoble  sees 
professional  benefits 
to  writing  a  blog  as 
well.  It  puts  his  IT 


knowledge  and  experience 
“out  there,”  he  noted.  “It  tells 
prospective  employers  what 
you  know.” 

Scoble  may  be  more  com¬ 
fortable  with  blogging  than 
are  most  IT  managers  partly 
because  of  the  efforts  of  his 
well-known  blogging  brother, 
Robert  Scoble,  who  is  an  em¬ 
ployee  at  Microsoft  Corp. 

Robert  Scoble  writes  a  blog 
called  “Scobleizer:  Microsoft 
Geek  Blogger”  that’s  ranked 
No.  31  on  the  list  of  the  100 
most-linked  blogs 
compiled  by  Techno- 
rati  Inc.’s  blog-tracking 
search  engine. 

Christopher  Sloop, 
chief  technology  offi¬ 
cer  at  AWS  Conver¬ 
gence  Technologies 
Inc.  in  Gaithersburg, 
Md.,  participates  in  a 
public  group  blog  at 
his  company,  which 
develops  the  widely 
used  WeatherBug  soft- 


SLOOP  says 
one  roadblock 
to  IT  managers 
blogging  is 
that  they  don’t 
have  enough 
time. 


[a]  Job  Tracking 

'SS/  Um  this  monitor  yoyr  •Courier's  progress. 


USING  eCOURIER,  customers  can  track  where  a  package  is  at  any  given  time. 


ware.  Sloop  said  he  thinks  it’s 
important  to  communicate 
about  the  software  and  discuss 
technical  issues  with  users. 

But  he  added  that  it’s  diffi¬ 
cult  to  find  the  time  to  work 
on  the  blog.  That  may  also  be 
an  issue  for  other  IT  man¬ 
agers,  Sloop  said.  Blogging  by 
users  “may  occur  more  on  a 
customer  support  level  or  a 
programmer  level,”  he  said. 

Among  major  vendors,  IBM 
this  month  detailed  a  policy 
that  encourages  its  320,000 
employees  to  blog.  IBM  isn’t 
prohibiting  workers  from  blog¬ 
ging  about  the  company  but 
said  they  should  include  their 
names  and,  when  relevant, 
roles  at  IBM.  The  company  also 
said  bloggers  need  to  follow  its 
conduct  code,  not  reveal  sen¬ 
sitive  issues  and  not  cite  cus¬ 
tomers  without  their  approval. 

Sun  is  hosting  more  than 
1,000  employee  blogs  that  are 
public  and  said  it  lets  workers 
discuss  any  topic  in  them.  Mi¬ 


crosoft  has  some  1,500  blogs, 
many  on  technical  issues  re¬ 
lated  to  its  products.  IBM  cur¬ 
rently  hosts  about  30  blogs 
written  by  employees,  and 
Hewlett-Packard  Co.  said  it’s 
also  hosting  a  relatively  small 
number  at  this  point. 

David  Gee,  vice  president  of 
marketing  for  the  manage¬ 
ment  software  business  at  HP, 
said  he  believes  blogging  will 
take  root  at  user  companies  as 
they  hire  younger  IT  workers 
who  blogged  regularly  in  col¬ 
lege.  “It  will  be  pushed  by  that 
generation  doing  what  they  do 
at  home  and  wanting  to  have  it 
in  the  office,”  he  said.  “We’ve 
seen  history  of  that  in  the  in¬ 
dustry  time  and  time  again.” 

©  54685 
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Keys  to  Successful  Business  Intelligence  Deployment  By  Dan  Vesset 

business  Needs  Gap 
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Analyze  the  Future 


he  evolution  of  information  technology  (IT)  is  continually 
producing  new  tools  for  productivity  enhancement.  Business  intel¬ 
ligence  (BI)  tools  and  applications,  for  instance,  have  undergone 
several  generations  of  improvements,  but  research  into  the  BI  mar¬ 
ket  suggests  that  considerable  productivity  can  still  be  tapped  by 
implementing  currently  available  BI  software.  The  business  need 
for  such  tools  is  more  pressing  than  ever,  and  so  is  the  challenge  to 
IT  departments  to  get  BI  implementations  right.  ► 
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The  Pillars  of  Decision- 
Process  Automation 

has  shown  that 

organizations  derive  two  primary 
benefits  from  Bl  projects:  produc¬ 
tivity  gains  and  business  process 
enhancements.  These  two  pri¬ 
mary  benefits  can  be  achieved  by 
selecting  Bl  tools  that  address  the 
following  four  major  variables  in 
decision  making,  which  in  turn 
can  lead  to  sustained  competi¬ 
tive  advantage: 


Speed 

Insight 


Accuracy 

Relevance 


Speed  and  accuracy  of 
decision  making  are  the 
primary  contributors  to 
increased  productivity.  On  the 
other  hand,  advanced  predictive 
and  descriptive  analytics,  as  man¬ 
ifested  in  the  insight  and  rele¬ 
vance  of  decision  making,  con¬ 
tribute  actively  to  business 
process  enhancements. 

Competitive  advantage  comes 
from  the  speed  and  accuracy  of 
decision  making,  as  well  as  from 
assessing  the  relevance  of  infor¬ 
mation  to  a  decision  and  from 
gaining  insight  in  seeking  and 
evaluating  possible  decision 
alternatives.  Because  many  types 
of  decisions  are  recurring  or 
repeatable  (such  as  pricing, 
extending  credit  or  allocating 
resources),  decision-making 
processes  exist  that  are  amenable 
to  automation. 

However,  decision  process 
automation  is  achievable  only 
when  all  four  variables  outlined 
above  are  used  in  software 
architectures  that  support 
decision  making. 


IDC  defines  business  intelligence  software  as  the  soft¬ 
ware  that  supports  speed,  accuracy,  relevance  and 
insight  in  decision  making.  Bl,  in  turn,  is  a  segment  of 
the  broader  business  analytics  market  that  includes 
tools  for  data  integration,  data  warehouse  manage¬ 
ment,  query  and  reporting,  data  mining,  technical 
data  analysis,  and  spatial  information  management 
as  well  as  prepackaged  applications  for  customer 
relationship  management  (CRM);  financial,  business 
performance  management;  supply  chain;  and 
operational  analytics. 

The  need  for  these  software  solu¬ 
tions  has  never  been  greater.  For 
instance,  data  published  last  year 
by  the  U.S.  Department  of  Labor 
has  shown  a  slowdown  in  produc¬ 
tivity,  which  suggests  that  perhaps 
the  low-hanging  fruit  of  the  excesses 
of  the  late  1990s  has  been  picked,  and 
therefore  businesses  need  to  find  new  ways  to 
increase  productivity  if  they  hope  to  gain  competitive 
advantage. 

A  new  investment  cycle  in  productivity-enhancing  tools 
appears  imminent,  and  current  investment  trends  in  Bl 
software  support  this  conclusion.  In  2004,  the  Bl  tools 
market  experienced  better-than-expected  performance, 
growing  by  9.5%  to  reach  $4.25  billion  in  worldwide 
software  revenue.  IDC  forecasts  a  2004-2009  com¬ 
pound  annual  growth  rate  (CAGR)  of  6.0%,  which 
reflects  some  changes  in  the  underlying  market,  such 
as  a  shift  in  software  sales  from  Bl  tools  to  packaged 
analytic  applications  and  database-embedded  Bl  com¬ 
ponents.  IDC  estimates  that  the  broader  business 
analytics  market  reached  $14.5  billion  in  2004. 

Critical  Misalignment 

Despite  a  healthy  adoption  rate,  however,  the  deploy¬ 
ment  of  software  to  support  decision-making  process¬ 
es  continues  to  lag  significantly  behind  the  money  that 
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companies  spend  on  software  to  process 
transactions.  IDC  research  shows  that  for 
every  dollar  spent  on  transaction  processing 
applications  or  capturing  and  getting  data 
into  databases,  only  $0.25  is  spent  on  get¬ 
ting  the  data  out  for  business  analytics  to 
support  decision-making  and  statutory 
reporting  processes. 

The  result  is  a  critical  misalignment  between 
business  needs  and  the  information  technol¬ 
ogy  intended  to  serve  those  needs.  For 
example,  a  recent  IDC  survey  revealed  that 
only  about  10%  of  business  managers  feel 
very  confident  with  the  statement  that  the 
reports  developed  in  their  organizations 
deliver  relevant  information  to  the  right 
people  at  the  right  time.  About  40%  of  the 
managers  surveyed  reported  feeling  not  at 
all  confident  or  only  somewhat  confident. 

Although  the  misalignment  between  IT  and 
business  is  ultimately  a  business  problem, 
IT  managers  must  address  several  distinct 
IT  challenges  to  successfully  implement 
and  support  BI: 

►  Defining  system  requirements.  BI  imple¬ 
mentation  is  often  a  vague  and  iterative 
process  because  of  the  difficulty  in  deter¬ 


mining  in  advance  all  the  information 
forms  that  users  want— the  type  of  reports 
or  the  alerts  for  certain  kinds  of  informa¬ 
tion.  Usually  the  BI  system  is  replacing  a 
relatively  manual  data-tracking  process 
that  may  employ  an  Excel  spreadsheet,  for 
example.  So  after  the  new  BI  system  is 
online,  users  begin  asking  for  more— more 
data  sources,  more  different  kinds  of 
reports,  more  key  performance  indicators 
(KPIs).  Each  of  these  requests  needs  to  go 
through  the  IT  department,  and  while  some 
are  relatively  easy  to  implement,  others 
take  more  time  and  testing.  Unlike  other  IT 
systems,  such  as  financial  applications  that 
remain  comparatively  static  following 
implementation,  BI  systems  are  dynamic 
and  continually  evolving. 

►Transforming  disparate  data  into  a  sin¬ 
gle  model.  All  the  information  that  popu¬ 
lates  user  “dashboards”  and  “scorecards”— 
the  BI  interfaces— must  be  brought  in  from 
different  systems  and  molded  into  a  single 
data  model.  This  is  a  complex  data  transfor¬ 
mation  task.  For  example,  IDC  has  found 
that  in  BI  projects  for  CRM  systems,  70%  of 
the  work  is  just  around  sourcing  and  map¬ 
ping  the  data— before  the  information  can  be 
accessed  and  distributed.  A  related  issue  is 


Challenge  of  Maintaining  Business 

Using  a  5-point  scale,  where  5  is  "very 
difficult"  and  1  is  "not  at  all  difficult," 
please  rate  the  difficulty  of  maintaining 
business  intelligence  data  quality. 
n=40 

Source:  IDC,  2005 
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maintaining  data  quality,  which  according  to  a  recent 
IDC  survey,  is  an  ongoing  challenge.  A  full  35%  of  sur¬ 
vey  respondents  said  that  data  quality  maintenance  is 
either  “very  difficult”  or  “difficult,”  versus  only  12.5% 
who  answered  “not  at  all  difficult”  (see  chart,  page  3). 

►  Managing  user  expectation/experience.  Users 
often  expect  to  get  a  lot  of  data  immediately  and  to 
have  the  system  solve  tough  business  problems.  As 
described  earlier,  BI  system  development  is  inherently 
iterative,  complex,  and  ongoing.  Furthermore,  while 
BI  is  being  extended  to  address  decision-making 
processes,  the  types  of  decisions  for  which  the  tech¬ 
nology  is  best  suited  tend  to  be  operational  decisions 
that  are  foreseeable  and  repeatable— decisions  that 
employees  have  to  make  on  a  regular  basis.  BI  will  not 
necessarily  hand  users  their  next  big  idea,  such  as  the 
creation  of  a  new  product.  Moreover,  although  70%  of 
respondents  to  a  recent  IDC  survey  said  that  existing 
BI  systems  let  them  effectively  make  operational  deci¬ 
sions,  30%  of  organizations  still  have  systems  that 
don’t  allow  for  effective  operational  decisions. 

►Guaranteeing  system  availability.  BI  is  not  just  for 
executives  anymore.  Increasing  numbers  of  line-of- 
business  managers  and  lower-level  employees  are 
accessing  BI  systems  to  make  important  decisions  as 
part  of  their  normal  duties.  BI  usage  is,  in  effect, 
reflecting  a  larger  business  trend  toward  decentraliza¬ 
tion,  the  flattening  of  organizational  hierarchies,  and 
increased  decision-making  responsibility  for  front¬ 
line  workers.  As  BI  follows  this  trend,  it  becomes  more 
operational,  and  while  BI  isn’t  yet  on  a  par  with  trans¬ 
action  processing  systems,  it’s  clearly  getting  there. 
Downtime  on  transaction  processing  systems  is  intol¬ 
erable,  and  it’s  increasingly  less  tolerated  on  BI  sys¬ 
tems.  This  indicates  that  BI  has  become  truly  integrat¬ 
ed  in  the  business  processes  of  many  companies.  IT 
managers  can  expect  this  trend  to  grow  with  the 
advent  of  real-time  information  delivery;  as  BI  infor¬ 
mation  becomes  more  time-sensitive,  system  down¬ 
time  becomes  a  bigger  problem.  • 
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FIND  OUT  when  Computerworld  publishes 
the  results  from  its  19th  Annual  Salary 
Survey  of  IT  professionals! 

How  much  are  other  IT  professionals  with  your  experience  and 
credentials  earning?  With  help  from  you  and  your  IT  colleagues 
across  the  country,  Computerworld  will  answer  that  question 
when  we  deliver  the  results  from  our  19th  Annual  Salary  Survey. 

Please  take  our  survey  now  and  enter  a  drawing  to  win 
one  of  10  Apple  iPod  Minis.  Our  survey  period  closes 
Friday,  June  27, 2005,  at  5  p.m.  Eastern  time. 
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Survey  results  and  feature  stories  that  offer  practical  career  advice 
will  be  published  in  the  Oct.  24, 2005,  issue  of  Computerworld. 

It  will  offer  detailed  information  on  average  salaries  and  bonuses, 
broken  out  by  title,  industry  and  region.  You’ll  be  able  to  compare 
your  organization’s  compensation  plans  with  those  of  other 
companies  and  find  the  hottest  areas  of  the  country  for  IT  pay. 
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Device-driven 


AT  A  SEMINAR  LAST  WEEK  in  San 

Francisco  on  the  impact  of  mobility  on 
business,  I  asked  for  a  show  of  hands 
to  see  how  many  of  the  attendees’ 
companies  have  a  policy  governing  the 
use  of  personal  devices.  Of  the  roughly  50  people  in 
the  audience,  four  raised  their  hands. 


No  one  in  the  room, 
including  me,  was  sur¬ 
prised.  The  lack  of  such 
policies  in  corporations 
is  well  documented.  But 
what  did  surprise  me  was 
the  depth  and  universali¬ 
ty  of  frustration  that  IT 
pros  are  feeling  with  re¬ 
spect  to  trying  to  manage 
mobile  devices. 

One  CIO  talked  about 
how  he’s  bummed  that 
vendors  haven’t  done  a 
better  job  of  standardizing  cell 
phone  and  handheld  wares;  another 
wondered  how  to  devise  a  sustain¬ 
able  support  model.  And  then  there’s 
the  issue  they’re  all  fretting  over, 
probably  more  than  any  other:  secu¬ 
rity.  Between  lost  data  and  the  pro¬ 
liferation  of  spam  and  viruses  target¬ 
ing  these  devices,  the  threat  seems 
to  be  overwhelming  many  CIOs. 

The  hand-wringing  over  security 
is  only  going  to  get  worse,  because 
personal  devices  are  only  going  to 
get  more  ubiquitous.  And  as  if  cell 
phones  and  handhelds  weren’t 
enough  to  contend  with,  MP3  play¬ 
ers  are  quickly  being  added  to  the 
cache  of  productivity  arms  in  your 
users’  arsenals. 

That  disquieting  fact  was  under¬ 
scored  last  week  when  Apple  Com¬ 
puter’s  Steve  Jobs  said  his  company 
will  support  and  organize  podcasts 
—  downloadable  audio  files,  typical¬ 
ly  of  voice  programming  —  in  the 
next  versions  of  its  iTunes  and  iPod 
software.  The  announcement  didn’t 
raise  too  many  security  alarms,  but 
think  about  it.  Podcasting  is  a  conve¬ 
nient,  inexpensive,  reliable  means  of 
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disseminating  informa¬ 
tion  to  a  global  work¬ 
force.  It’s  already  gain¬ 
ing  popularity  as  a  vehi¬ 
cle  for  sharing  the  pro¬ 
ceedings  of  meetings 
and  conferences,  and  it’s 
easy  to  imagine  how  it 
might  be  used  for  corpo¬ 
rate  training  and  vertical 
applications  like  distrib¬ 
uting  lecture  materials 
in  the  education  sector. 
What  that  means  is 
that  MP3  players  will  eventually  be 
standard  equipment  for  your  users. 
And  when  that  time  comes,  the  ca¬ 
pacity  for  corporate  data  loss  will  be 
almost  incomprehensible:  Your  net¬ 
works  and  devices  might  be  bullet¬ 
proof,  but  there  will  be  nothing  to 
mitigate  the  insider  security  threat 
when  your  organization  is  inundat¬ 


ed  with  what  are  essentially  port¬ 
able  hard  drives  with  exponentially 
growing  storage  capacities. 

Fortunately,  for  many  organiza¬ 
tions  there  will  be  a  silver  lining  in 
all  this,  because  they’ll  no  longer 
have  to  deal  with  the  headache  of 
supporting  a  PC  on  every  desktop. 
Concern  about  the  damage  these  de¬ 
vices  can  do  will  be  the  catalyst  that 
finally  makes  server-based,  thin- 
client  computing  compelling 
enough  for  many  CIOs  to  bite  the 
bullet  and  make  the  switch. 

Just  last  week,  Hitachi  cited  secu¬ 
rity  as  the  main  reason  for  a  plan  to 
replace  16,000  internal  PCs  with 
thin  clients  over  the  next  two  years 
[QuickLink  a5890].  True,  Hitachi  is 
in  the  business  of  selling  thin-client 
systems,  and  its  move  is  similar  to 
what  Sun  Microsystems  has  done 
with  the  internal  adoption  of  its  Sun 
Ray  thin  clients. 

There’s  unquestionably  a  market¬ 
ing  element  involved,  but  it  would 
be  shortsighted  to  chalk  the  strate¬ 
gies  up  to  gimmickry.  These  guys 
are  on  to  something.  ©  54651 


There’s  a 
Scarcity  of 
Great  Stuff 

WHERE  HAS  all  the 
good  stuff  gone? 
When  Jef  Raskin 
passed  away  not  too  long  ago, 

I  started  wondering  about  this.  As  a 
longtime  champion  of  simpler  comput¬ 
ing  interfaces,  Raskin  was  behind  the 
original  concept  of  the  Macintosh,  be¬ 
fore  Steve  Jobs  took  over  the  project. 
His  focus  was  on  simplicity  and  easier 
interaction  between  man  and  machine. 

Over  the  years,  other  great  designers 
have  created  some  truly  innovative  ap¬ 
plications  and  helped  drive  productivi¬ 
ty  forward.  Sadly,  many  of  these  tech¬ 
nologies  have  fallen  by  the  wayside, 
and  along  with  them,  a  lot  of  great  fea¬ 
tures  in  human/computer  interaction 
have  been  lost.  Here 
are  some  of  the 
things  I  miss  and 
some  of  the  features 
that  made  them  not 
only  indispensable 
but  also  classics  that 
have  no  peers  among 
today’s  personal  pro¬ 
ductivity  tools.  It’s 
time  to  look  back  to 
drive  things  forward. 

Remember  Agen¬ 
da  from  Lotus?  This 
personal  information 
manager  offered  a 
dazzling  array  of 
flexible  features  and 
views  and  could  un¬ 
derstand  natural 
commands  such  as 
“Meet  with  Joe  next 
Thursday  at  1.” 

Lotus  also  created  Improv,  a  next- 
generation  spreadsheet.  Introduced  as 
a  showcase  piece  of  software  for  the 
NeXT  platform  (and  later  ported  to 
Windows),  it  was  as  different  from 
anything  that  had  come  before  it  as 
spreadsheets  were  from  paper  ledgers. 
The  program  was  object-driven,  and  it 
was  easy  even  for  novices  to  create  and 
restructure  data  on  the  fly.  Microsoft’s 
answer  was  to  incorporate  pivot  tables 
into  Excel,  but  it  was  hardly  the  same 
thing.  Now  the  spreadsheet  languishes, 
and  Excel  has  hardly  changed  in  years. 
Other  productivity  greats?  Page- 
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Maker  let  anyone  do  professional  paste¬ 
up  work  without  intensive  knowledge  of 
graphic  arts.  The  simple  metaphor  for 
layout  had  no  equal.  Today’s  programs 
are  all  either  too  simplistic  in  function¬ 
ality  or  too  arcane  for  mere  mortals. 

It  wasn’t  just  applications.  Operating 
systems  were  moving  forward  at  one 
point  before  stagnation  set  in.  When 
Apple  introduced  the  Newton  technol¬ 
ogy,  it  seemed  revolutionary.  There 
was  no  file  system,  and  all  complexity 
was  hidden  from  the  user.  The  default 
state  for  all  information  was  to  be 
saved  permanently.  I  recently  dug  out 
an  old  Newton  from  1996  or  so  and 
popped  in  a  set  of  AA  batteries,  and, 
announced  by  a  little  trill,  there  were 
all  my  applications  and  data,  ready  and 
waiting  for  me.  Try  that  with  an  old 
handheld  and  see  what  happens. 

Hardware  has  also  taken  a  step  back¬ 
ward.  The  HP  lOOlx,  for  example,  was 
a  nearly  perfect  mobile  computing  de¬ 
vice.  It  had  a  usable  mobile  keyboard 
and  a  real  embedded  numeric  keypad, 
so  taking  down  phone  numbers  from 
voice  mail  was  a  snap.  It  ran  forever  on 
two  AA  batteries  and  even  had  a  PC 
Card  slot.  If  I  could  get  mine  to  do 
wireless  e-mail  and  sync  with  Outlook, 
I’d  go  back  to  it  in  a  heartbeat. 

It’s  time  for  some  innovation.  I’m 
tired  of  mediocrity  and  complexity  in 
the  hardware  and  software  I  use.  I’m 
tired  of  Linux  distributions  masquer¬ 
ading  as  innovation  by  trying  to  mimic 
Windows  and  Office  (with  all  of  their 
flaws,  I  might  add).  How  about  bring¬ 
ing  back  some  of  the  older  concepts, 
updated  for  the  21st  century?  I’m  wait¬ 
ing  with  my  credit  card  at  the  ready, 
and  I  suspect  others  are,  too. 

What  classic  programs  and  features 
do  you  miss?  Drop  me  a  line  and  let  me 
know.  ©  54487 

JOHN  D.  HALAMKA 

Health  Care 
Needs  a  DNS 
For  Patients 

A  PATIENT  WITH  an  al¬ 
lergy  to  aspirin  has  a 
heart  attack  while  dri¬ 
ving,  loses  consciousness  and 
crashes  into  a  telephone  pole.  In  the* 
emergency  department,  the  first  med¬ 
ication  likely  to  be  given  to  him  is  ther¬ 
apy  for  the  heart  attack  —  aspirin. 
Adding  an  allergic  reaction  to  the  ex¬ 


isting  heart  attack  and  trau¬ 
ma  results  in  shock,  and  the 
patient  dies. 

If  there  were  a  national 
health  care  information  net¬ 
work,  medical  errors  result¬ 
ing  from  lack  of  data  shar¬ 
ing  would  be  drastically  re¬ 
duced.  Unfortunately,  there 
are  many  barriers  to  the  se¬ 
cure  exchange  of  electronic 
medical  records,  the  most 
basic  of  which  is  the  lack  of 
a  consistent  way  to  identify 
each  patient. 

For  privacy  reasons,  it’s 
unlikely  that  we  in  the  U.S. 
will  have  a  national  health 
identifier  in  the  next  decade. 

Recent  privacy  spills  at 
ChoicePoint,  DSW  and 
Ameritrade  highlight  the 
risks  of  maintaining  a  nation¬ 
al  health  identifier  that  could 
be  used  with  other  identifiers,  such  as 
Social  Security  numbers,  to  link  med¬ 
ical,  banking  and  employment  records. 

A  better  way  to  interconnect  health 
care  is  to  leave  all  the  data,  without  a 
national  identifier,  where  it  lives  today 
in  doctors’  offices,  hospitals,  labs  and 
pharmacies,  but  connect  it  with  the 
kind  of  decentralized,  federated  but 
coordinated  architecture  that  drives 
the  Web.  When  you  want  to  buy  a  book 
from  Amazon.com,  it’s  unlikely  that  you 
type  the  IP  address,  http://207.171.175.29. 


Instead,  you  type  www. 
amazon.com,  and  the  Inter¬ 
net’s  Domain  Name  System 
connects  you  to  the  right 
Web  server. 

Imagine  a  DNS  for  pa¬ 
tients  that  functions  in  a 
similar  way.  When  a  pa¬ 
tient  consented  for  his 
identity  to  be  recorded,  his 
name,  sex,  date  of  birth, 

ZIP  code  and  medical 
record  number  (but  not 
clinical  information)  would 
be  securely  transmitted  to 
a  medical-grade  patient 
DNS.  A  clinician  needing 
access  to  medical  records 
could,  with  the  patient’s 
consent,  query  the  DNS  by 
providing  demographic  in¬ 
formation  and  then  obtain 
a  list  of  the  institutions  the 
patient  had  visited  as  well 
as  his  medical  record  numbers.  He 
wouldn’t  have  to  know  the  numbers  — 
the  rough  equivalent  of  Amazon’s  IP 
address  —  ahead  of  time. 

In  the  short  term,  this  patient  DNS 
would  provide  the  clinician  with 
enough  information  to  contact  other  in¬ 
stitutions  that  have  treated  the  patient 
and  request  medical  records  via  fax  or 
phone.  Over  the  next  few  years,  as  hos¬ 
pitals  set  data-exchange  standards  and 
clinician  offices  implement  interopera¬ 
ble  electronic  health  records,  this  pa- 
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tient  DNS  would  provide  a  framework 
for  linking  electronic  health  data. 

Groups  in  Massachusetts,  Indiana 
and  California  are  piloting  a  patient 
DNS  this  summer  as  part  of  a  common 
framework  to  exchange  medical 
records,  with  funding  from  the  Markle 
Foundation’s  Connecting  for  Health 
Project  ( http://connectingforhealth.org ) 
and  the  Robert  Wood  Johnson  Founda¬ 
tion.  The  technical  architecture  is  built 
upon  Web  services,  secure  gateways 
and  the  WS-Security  standard.  The  pi¬ 
lot  implementation  is  called  the 
Record  Locator  Service. 

The  privacy  and  security  policies 
that  protect  patient  confidentiality,  en¬ 
sure  consent  and  provide  auditing  of 
the  lookup  process  are  much  more 
challenging  than  the  technology  itself. 
This  summer’s  pilot  will  engage  pa¬ 
tients,  privacy  experts,  attorneys,  clini¬ 
cians,  employers  and  payers  to  develop 
these  policies  and  oversee  the  project. 

With  a  secure  patient  DNS,  we  can 
interconnect  health  care  in  this  coun¬ 
try,  saving  lives,  reducing  costs  and 
bringing  health  care  to  the  same  level 
of  interoperability  that  has  revolution¬ 
ized  industries  such  as  financial  ser¬ 
vices,  airlines  and  manufacturing. 

©  54480 
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Proper  Development  Requires  Feedback 


Michael  h.  Hugos  left  out 
feedback  in  the  approach  he 
described  in  his  column  “Just  a 
Handful  of  Techniques”  [QuickLink 
53699],  Without  it,  one  doesn’t 
know  whether  the  final  product  was 
what  was  desired. 

After  the  product  is  completed, 
users  need  to  be  trained  on  it,  and 
then  they  should  play  with  it  for  a 
while  to  see  what  they  like,  what 
they  use,  what  they  thought  was 
going  to  be  delivered  but  wasn’t, 
how  to  do  some  extra  things  that 
they  didn’t  expect  and  anything  else 
that  comes  from  actual  hands-on 
experience. 

Afterwards,  they  need  to  be 
asked  for  their  critiques  of  the  prod¬ 
uct:  Was  it  what  they  expected 
(both  good  and  bad  things)?  Does 
it  work  as  advertised  (again,  for  bet¬ 
ter  or  worse)?  What  would  they 
change  if  they  could?  These  re¬ 


sponses  should  then  be  shown  to 
the  design  team,  which  can  possibly 
get  some  ideas  for  improvements. 
James  A.  Olson 
Senior  researcher,  Homeland 
Security  Institute,  Arlington,  Va., 
james.olson@hsi.dhs.gov 


Stick  With  Paper 
Ballots  for  Backup 

IN  THE  STORY  "E-voting  May 
Face  Recall  in  Florida  County” 
[QuickLink  53813],  Miami-Dade 
County  Mayor  Carlos  Alvarez  is 
quoted  as  saying  that  “people  want 
some  sort  of  backup,  a  hard  copy 
on  paper,”  which  is  unavailable  with 
touch-screen  machines. 

It  would  appear  that  Alvarez  has 
arrived  at  the  same  conclusion  that 
I  reached  when  electronic  voting 
was  just  being  widely  discussed:  1) 


A  paper  trail  is  necessary,  and  2) 
the  best  way  to  do  this  is  to  mark 
paper  ballots  and  scan  them  opti¬ 
cally.  The  resulting  paper  trail  then 
can  always  be  recounted  until  the 
paper  itself  disintegrates. 

And  of  course,  while  it  is  possi¬ 
ble  to  miscount  even  with  optical 
scanning,  the  original  vote  remains 
intact  and  unaffected  by  coding 
errors. 

Charles  J.  Lingo 

Denham  Springs,  La. 


Blades  Work  Fine 

THE  SEEDS  OF  DOUBT  about 
blade  center  technology  were 
most  probably  planted  by  those  in 
the  industry  who  don’t  have  viable 
solutions  [“Edgy  About  Blades,” 
QuickLink  53851].  I  recall  some  re¬ 
marks  by  Michael  Dell  a  year  or  so 
ago  that  warned  about  heat  buildup. 
My  guess  is  that  at  that  time,  Dell 
hadn't  figured  it  out  yet. 


We  are  happy  IBM  BladeCenter 
users  with  almost  a  full  rack.  We  run 
Novell,  Windows  and  Linux  via 
VMware  on  the  blades  and  Fibre 
Channel  them  to  a  Shark  and  an 
IBM  LTO.  We  have  never  had  a 
problem  with  the  blades  or  with  the 
technology  involved  in  the  product 
design. 

Wally  Knapp 
Baltimore 

COMPUTERWORLD  welcomes 
comments  from  its  readers.  Letters 
will  be  edited  for  brevity  and  clarity. 
They  should  be  addressed  to 
Jamie  Eckle,  letters  editor,  Com- 
puterworld,  PO  Box  9171, 1  Speen 
Street,  Framingham,  Mass.  01701. 
Fax:(508)879-4843.  E-mail: 
letters@computerworld.com. 
Include  an  address  and  phone 
number  for  immediate  verification. 

OFor  more  letters  on  these  and 
other  topics,  go  to 

www.computervvorld.com/letters 


Don’t  Miss 
Your  Chance! 
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IT  LEADERS  2006 


Nominate  an  outstanding  IT 
leader  for  Computerworld’s 
Premier  100  IT  Leaders 
2006 Awards  program 


EACH  YEAR,  Computerworld  editors  conduct  a  nationwide  search  for 
IT  managers  and  executives  who  show  technology  leadership  in  their 
organizations.  This  prestigious  awards  program  recognizes  and  honors 
IT  professionals  from  a  wide  range  of  industries,  drawing  attention  to  the 

innovative,  business-critical 
work  they  do. 

ELIGIBLE  NOMINEES  include 
CIOs,  CTOs,  vice  presidents, 
IT  directors  and  managers 
from  user  companies,  nonprof¬ 
its,  the  computer  industry  and 
the  public  sector. 

HONOREES  will  be  announced 
in  Computerworld’s  Dec.  12, 

2005,  issue  and  will  be  our 
guests  at  the  7th  Annual 
Premier  100  IT  Leaders 
Conference,  March  5-7, 

2006,  in  Palm  Desert,  Calif. 


Who  Qualifies? 


IT  managers  and 
executives  who 

■  Effectively  manage  IT  and 
business  strategies 

■  Envision  innovative 
approaches  to  business 
problems 

■  Foster  great  ideas  and 
creative  work  environments 

■  Excel  at  vendor  and  supplier 
management 

■  Take  calculated  risks  and 
learn  from  failure 


Deadline  for  Nominations  Is  May  31 

Go  online  to  nominate  an  IT  leader  at  computerworld.com/p100nominations  or  O  QuickLink  a3420. 
Questions?  Contact  us  by  e-mail  at  premier100@computerworld.com. 
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Ail  Together  Now 

Systems  integrators  spend  their 
professional  lives  making  tech¬ 
nologies  interoperate.  Here  are 
the  steps  they  say  are  key  to  plan¬ 
ning  and  executing  successful 
integration  projects.  Page  26 


Driven  by  million-doliar 
fines,  businesses  are 
using  technology  to 
comply  with  legal  and 
regulatory  requirements 
-  and  regain  control 
over  electronic  records. 
By  Robert  L.  Mitchell 

A  few  years  ago,  most  com¬ 
panies  didn’t  give  much 
thought  to  electronic  rec¬ 
ords  management.  But  a 
spate  of  scandals,  lawsuits 
and  new  regulations  has 
changed  all  that. 

Despite  renewed  atten¬ 
tion  to  e-records  manage¬ 
ment,  however,  many  organizations 
still  lack  automated  systems  to  effi¬ 
ciently  process  all  e-records  requested 
during  a  legal  discovery  proceeding. 
Yet  retrieving  such  records  —  and  the 
penalties  for  noncompliance  —  can 
cost  businesses  millions  of  dollars. 

“E-litigation  is  an  extremely  expen¬ 
sive  endeavor,”  says  Jane  Connerton, 
corporate  records  manager  at  The 
Procter  &  Gamble  Co.  in  Cincinnati. 
While  P&G  has  a  records  retention 
policy,  finding  and  retrieving  records 
during  legal  discovery  can  be  a  daunt¬ 
ing  challenge  —  especially  when  the 
records  are  on  backup  tapes. 

“We  had  a  case  that,  after  a  week’s 
worth  of  discovery,  we  calculated  that 
backup  tape  suspension  and  legal  re¬ 
view  of  the  e-records  was  going  to  cost 
us  a  million  dollars,”  Connerton  says. 
And,  she  adds,  such  requests  aren’t  un¬ 
common  for  businesses  of  P&G’s  size. 

In  response,  companies  are  turning 
to  records  and  content  management 
systems  to  automate  the  processes  for 
identifying  and  categorizing  records  of 


QUICKSTUOY 

Supercomputers 

When  is  a  computer 
a  supercomputer?  In 
the  end,  it’s  all  about 
performance. 

Page  30 


SECURITY  MANAGER’S  JOURNAL 

More  Than  a  Token  Overhaul  of  the  VPN 

Getting  approval  to  deploy  two-factor  authentication  was 
only  half  the  battle.  Now  Mathias  Thurman  must  redeploy 
the  VPN  infrastructure  to  make  it  work.  Page  32 


all  types,  establishing  and  en¬ 
forcing  retention  schedules, 
and  maintaining  accessibility 
to  those  records. 

“You’re  trying  to  identify 
what  has  become  a  record, 
associate  a  rule  with  it  and 
blow  it  away  when  it’s  no  longer 
needed,”  says  Julie  Gable,  prin¬ 
cipal  of  Gable  Consulting  in 
Philadelphia. 

Companies  must  also  comply 
with  myriad  local  and  federal 
regulations  that  vary  by  industry. 

For  example,  SEC  Rule  17  requires 
that  brokerages  store  records  in  a  non- 
rewritable,  nonerasable  format.  Sar- 
banes-Oxley  Act  Section  802  requires 
some  records  to  be  held  for  seven  years 
Other  requirements  are  triggered  by 
events,  such  as  health  care  regulations 
that  require  records  to  be  kept  for  a 
certain  period  after  a  patient’s  death. 


The  Elusive  E-record 

Records  serve  as  evidence,  says 
Gable.  “They  accrue  to  business 
processes,  show  what  transpired 
during  transactions,  confirm 
rights  and  obligations,  and  provide  mo¬ 
tive  for  corporate  action.”  What  consti¬ 
tutes  a  record  is  determined  by  busi¬ 
ness,  regulatory  and  legal  requirements. 
Those  definitions  and  policies  are  Typi¬ 
cally  set  by  a  corporate  records  manag¬ 
er,  but  IT  must  manage  those  records. 

Today,  records 
take  many  forms. 

While  printed 
documents  may  be  col¬ 
lected  in  file  cabinets, 
e-records  are  scattered 
across  a  wide  range  of 
repositories.  They  may 
be  embedded  in  e-mail, 
instant  messages  and 
other  unstructured 
data  that  account  for  up 
to  40%  of  business  data 
flows,  according  to  the 
Storage  Networking 
Industry  Associa¬ 
tion  (SNIA). 
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“E-mail  is  the  biggest  issue  we  see,” 
says  Barclay  T.  Blair,  director  of  the  IT 
compliance  practice  at  Kahn  Consult¬ 
ing  Inc.  in  Highland  Park,  Ill. 

In  2004,  for  example,  Banc  of  Ameri¬ 
ca  Securities  LLC  was  fined  $10  million 
and  Philip  Morris  USA  Inc.  and  Altria 
Group  Inc.  $2.75  million  for  failing  to 
produce  e-mail  records  in  a  reasonable 
time  frame  and  failing  to  preserve  doc¬ 
uments  after  being  told  to  do  so.  But 
despite  such  penalties,  65%  of  organi¬ 
zations  still  don’t  have  an  e-records 
policy  for  legal  hold  orders,  let  alone 
the  technology  to  enforce  it,  according 
to  a  survey  by  the  Association  of 
Records  Managers  and  Administrators 
(ARMA)  and  the  Association  of  Infor¬ 
mation  and  Image  Management. 

The  typical  IT  strategy  of  saving 


SIX  TIPS 
FOR  HANDLING 
E-RECORDS 

Jane  Connerton.  corporate  records 
manager  at  Proctor  &  Gamble,  re¬ 
cently  oversaw  the  establishment  of 
e-records  guidelines  and  is  working 
with  IT  to  implement  them  across  all 
data  repositories.  She  offers  these 
six  tips  for  IT  organizations: 

■  Know  the  record  contents  of 
data,  and  manage  the  life  cycle 
accordingly,  as  opposed  to  manag¬ 
ing  it  based  on  volume  or  location 
(for  example,  60GB  on  Unix 
Server  3). 

■  Understand  how  the  record 
will  be  retrieved  and  used  by 
primary  users,  and  design  the  sys¬ 
tem  to  meet  those  specifications. 

■  Work  with  your  legal  or  regula¬ 
tory  experts  and  know  what  laws  or 
regulations  apply  to  the  records  in 
your  system. 

e  When  preserving  a  record, 
maintain  all  the  metadata,  too,  in 

order  to  adequately  define  the  context. 

■  Don't  keep  backup  data  any 
longer  than  necessary  to  meet 
operational  needs,  and  never 
longer  than  the  record  itself. 

■  When  erasing  a  record,  simply 
deleting  the  file  isn’t  good 
enough.  Use  a  process  or  technol¬ 
ogy  that  completely  obliterates  the 
data  so  it  can’t  be  retrieved  later. 


everything  doesn’t  help,  says  Larry 
Medina,  a  records  management  con¬ 
tractor  in  Danville,  Calif.  “All  non¬ 
record  material  should  be  destroyed  as 
soon  as  is  practical,”  he  says.  “If  you 
have  things  you  didn’t  need  to  retain, 
they  become  ticking  time  bombs  in 
your  system.”  Those  documents  could 
be  used  to  the  detriment  of  the  compa¬ 
ny  in  legal  proceedings,  he  says. 

But  more  important,  they  add  to  the 
cost  of  discovery,  says  Deidre  Paknad, 
president  of  record  information  man¬ 
agement  (RIM)  software  vendor  PSS 
Systems  Inc.  in  Palo  Alto,  Calif.  “If 
there’s  a  legal  hold,  all  the  information 
you  have,  whether  a  business  record  or 
not,  is  discoverable,”  she  says. 

Once  a  policy  is  in  place  for  deleting 
end-of-life  records,  halting  those  proc¬ 
esses  in  response  to  a  legal  hold  order  is 
difficult.  Many  organizations  lack  ade¬ 
quate  technology  and  processes  to  deal 
with  the  problem,  Gable  notes. 

IT  needs  to  work  closely  with 
records  managers,  says  ARMA  Presi¬ 
dent  Dave  McDermott.  As  assistant 
records  manager  at  agribusiness  con¬ 
glomerate  J.R.  Simplot  Co.  in  Boise, 
Idaho,  McDermott  worked  with  his  IT 
group  to  develop  a  retention  require¬ 
ment  for  all  backups. 

Because  records  may  be  needed  in 
the  future,  eliminating  or  archiving 
based  on  activity  level  or  disk  space 
usage  doesn’t  work,  says  Michael 
Peterson,  program  director  of  the 
SNIA  Data  Management  Forum. 

At  a  minimum,  good  records  man¬ 
agement  practices  require  interaction 
among  IT,  the  corporate  records  man¬ 
ager,  the  business  units  that  own  the 
data  and  the  legal  department.  Today, 
part  of  the  problem  is  ignorance  of 
records  requirements  within  some  IT 
organizations,  says  P&G’s  Connerton. 

Evolving  Tools 

RIM  software  helps  to  define  and  cate¬ 
gorize  records  and  set  retention  poli¬ 
cies.  But  the  programs,  originally  cre¬ 
ated  to  manage  paper  records,  are  still 
evolving  to  handle  e-records  in  places 
ranging  from  the  ERP  system  to  e-mail. 
To  deal  with  this  challenge,  most  prod¬ 
ucts  copy  files  and  related  metadata 
into  a  central  repository.  Records  man¬ 
agement  tools  also  integrate  with  desk¬ 
top  productivity  software,  e-mail  pro¬ 
grams  and  archiving  software  to  iden¬ 
tify  records  and  establish  an  audit  trail 
for  compliance  purposes. 

RIM  has  caught  the  attention  of  en¬ 
terprise  content  management  (ECM) 
software  vendors  such  as  EMC  Corp.’s 
Documentum  Inc.  unit.  They  have 
snapped  up  RIM  products  and  inte- 


WHEN  RECORD-KEEPING  GOES  WRONG 

Here  are  a  few  examples  of  organizatii  is  that  have  paid 
a  price  for  inadequate  records  management. 

■Mir  111 

When  May  2004  :  When:  July  2004 

in  response  to  a  Securities  and  Exchange  days  old  for  more  than  two  years  after  a  legal 
Commission  investigation.  order  to  preserve  all  documents  relating  to  liti- 

$25  million  fine  gallon.  Failed  to  follow  the  company’s  internal 

. . . . . :  procedures  for  document  and  e-mail  preser- 

Who:  vation. 

When  July  2004  :  Consequences  $2.75  million  fine 

During  an  ongoing  gender- 
discrimination  lawsuit  (Zubulake  v.  UBS  War¬ 
burg),  deleted  relevant  e-mails  despite  court  |  Where  March  2QQ4 
order;  failed  to  locate,  preserve  records  and  :  Aceusatio  i ;  Violation  of  Exchange  Act 
produce  e-mail  and  other  documents  in  a  record-keeping  requirements,  including  failure 

timely  manner.  to  produce  e-mail  records  in  a  timely  manner 

.  Ordered  to  produce  relevant  and  failure  to  preserve  documents  after  an 
documents  and  pay  for  redeposition  of  some  SEC  staff  request  to  do  so. 

witnesses  and  pay  legal  expense  of  the  plaintiff.  :  Consequences  $10  million  fine;  censure 


grated  them  into  their  own  suites. 

But  Connerton  says  centralization  is 
no  panacea.  “In  a  major  corporation, 
you’re  never  going  to  have  a  single 
repository  for  all  records,”  she  says. 
While  P&G’s  seven  divisions  do  use 
RIM  and  ECM  tools  for  some  records, 
that’s  not  enough.  “What  we’ve  done 
is  mapped  out  where  the  records  are, 
who  owns  them  from  an  IT  perspec¬ 
tive  and  how  we  can  get  them  to  facili¬ 
tate  the  discovery  process,”  she  says. 

At  FirstEnergy  Corp.  in  Akron,  Ohio, 
one-third  of  the  company’s  records  are 
in  its  ERP  system  and  can’t  be  easily 
copied  into  a  central  repository.  Senior 
IT  systems  analyst  Teresa  Straight  says 
she’s  trying  to  figure  out  how  to  con¬ 
nect  a  FileNet  system  with  SAP  in  or¬ 
der  to  manage  records  in  the  compa¬ 
ny’s  data  warehouses. 

Most  RIM  products  still  rely  on  man¬ 
ual  processes  or  prompt  the  end  user 
to  identify,  classify  and  check  in 
records.  Products  such  as  FileNet 
Corp.’s  Records  Manager  are  at  the 
forefront  of  a  trend  to  automate  that. 
With  e-mail  volume  exploding,  auto¬ 
mated  identification  and  classification 
of  records  is  crucial,  says  Craig  Rhine- 
hart,  director  of  compliance  products 
and  solutions  at  Costa  Mesa,  Calif.- 
based  FileNet.  “If  you  think  you’ll  get 
10,000  users  to  manually  declare  and 
classify  records,  you’re  wrong.  Enforce 
your  policy  at  the  technology  layer,  not 
at  the  user  layer,”  he  says. 

Connerton  says  she  wouldn’t  trust  an 
automated  categorization  system  alone 
—  a  sentiment  Blair  agrees  with.  “You 
can  get  part  of  the  way  there  with  real¬ 


ly  good  tools,  but  ultimately,  you  need 
to  rely  on  employees,”  he  says,  and  that 
requires  both  policy  and  training. 

At  P&G,  employees  attend  a  15-minute 
training  session  and  an  annual  refresher. 
They  are  also  required  to  review  their 
files  annually  to  comply  with  P&G’s 
retention  schedules,  Connerton  says. 

Records  management  best  practices 
must  be  infused  throughout  the  IT  sys¬ 
tems  that  create  or  touch  records,  prac¬ 
titioners  say.  Connerton  is  working 
with  IT  to  integrate  e-records  guide¬ 
lines  into  the  P&G’s  information  sys¬ 
tems.  With  business  units  ranging 
from  pharmaceuticals  to  dog  food 
producers,  that’s  not  an  easy  task. 

“We  can’t  impose  them  immediately 
because  there  are  legacy  systems  that 
are  too  expensive  to  retrofit,”  explains 
Connerton.  It  will  be  five  to  seven 
years  before  every  document  reposito¬ 
ry  is  in  compliance,  she  says. 

Larry  Hawkins,  director  of  records 
and  information  compliance  at  First¬ 
Energy,  says  he  collaborates  with  IT 
on  new  system  designs.  “We  don’t  pro¬ 
cure  technology  without  a  thorough 
review,”  he  says.  ©  54300 

MORE  ONLINE 

Read  a  collection  of  crucial  information  about 
e-records  and  the  rules  that  govern  them: 

QuickLink  54584 

Records  management  is  becoming  a  big  part  of 
information  life-cycle  management: 

QuickLink  54310 

See  a  list  of  standards  organizations  that  are 
working  on  e-records: 

QuickLink  54585 
www.computerworld.com 


SAP  NETWEAVER  SPEAKS  OPEN  STANDARDS, 
BUSINESS  PROCESS  INNOVATION 
AND  CIO  OF  THE  YEAR. 


Finally, 
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business  and  IT 
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speak  the  same  language. 
SAP  Net  Weaver"  is  an  open 
platform  that  takes  flexibility 
to  another  level.  It  allows  you  to 
quickly  implement  new  business 
strategies  and  drive  competitive  advantage 
—  all  w  hile  boosting  productivity  and  letting 
you  leverage  your  existing  IT  investments. 
Visit  sap.com/technology  to  learn  why  thousands 
of  customers  already  rely  on  SAP  NetWeaver. 


THE  BEST-RUN  BUSINESSES  RUN  SAP 


IBM  eServer®  xSeries' 


PAY  MORE  ATTENTION  TO  SERVERS 
BEFORE  YOU  BUY  THEM. 

SO  YOU  CAN  PAY  LESS  ATTENTION 
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Affordable,  reliable,  easy  to  manage:  eServer®  xSeries®  with  intel®  Xeon™  Processors 
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Flexible  and  easy  to  use 


I8M  eServer  BladeCenter  HS20  Express 


Designed  to  improve 
performance  and  availability, 
with  a  range  of  features 
such  as  redundant  hot-swap 
power  and  cooling. 

System  features 

Up  to  two  Intel  Xeon 
Processors  3.60GHz 
Two-way  tower  with 
rack  capability 
Up  to  9  hot-swappable 
SCSI  hard  disk  drives 
IBM  Director 
Limited  warranty:  up  to  3 
years  on-site3 

From  $2,989* 

IBM  Financing  Advantage 

Only  $82  per  month' 


Help  maximize  performance 
and  improve  availability  in  a 
rack  dense  environment  with 
Xtended  Design  Architecture™ 
Includes  features  like  Calibrated 
Vectored  Cooling,  an  IBM 
innovation  that  helps  to  keep 
your  system  cool  and  improve 
uptime. 

System  features 

Up  to  two  Intel  Xeon 
Processors  3.60GHz 
Two-way  2U  rack  server 
Up  to  16GB  DDR2  memory 
using  8  DIMM  slots 

Calibrated  Vectored  Cooling 
IBM  Director 
Limited  warranty:  up  to  3 
years  on-site3 

From  $3,999* 

IBM  Financing  Advantage 

Only  $109  per  month4 


With  the  power  of  3rd  generation  ]> 
Enterprise  X-Architecture,™  it  sets  qd 
a  new  standard  for  4-socket, 

64-bit  servers.  Delivers  increased 
performance,  systems  manage¬ 
ability,  and  simultaneous  support 
for  32  and  64-bit  apps. 

System  features 

Up  to  four  64-bit  Intel  Xeon 
Processors  MP  3.66GHz 
64GB  DDR  memory 
2GB  memory  expandable 
to  64GB 

Six  64-bit  Active  PCI-X  2.0 
IBM  Director 

Calibrated  Vectored  Cooling 
Limited  warranty:  up  to  3  years 
on-site? 

From  $13,779* 

IBM  Financing  Advantage 
Only  $379  per  month4 


Designed  to  support  the  Intel 
Xeon  Processor  and  packed 
with  high-availability  features, 
the  eServer  BladeCenter 
HS20  with  industry-leading 
modular  design  delivers  density 
without  sacrificing  processor 
performance. 

System  features 

Up  to  two  Intel  Xeon 

Processors  3.60GHz _ 

Up  to  14  blades  per  chassis 
Supports  both  32 

and  64-bit  applications 
IBM  Director 
Limited  warranty:  up  to  3 
years  on-site3 

From  $2,589* 

IBM  Financing  Advantage 

Only  $71  per  month4 


BM  TotalStorage® 


Simplify  storage  management  to  improve  productivity 


IBM  TotalStorage  DS300  Express 

Entry-level,  cost-effective  SCSI  storage  systems 
designed  to  deliver  advanced  functionality  at  a 
breakthrough  price.  Provides  an  exceptional 
solution  for  work  group  storage  applications,  such 
as  e-mail,  file,  print,  database  and  Intel  Xeon 
Processor-based  servers. 


System  features 

3U  rack-mount  entry  level 

Support  for  up  to  14 

Ultra320  SCSI  disk  drives 

Starts  at  584GB  /  Scales  to  4.2TB 
From  $5,355* 


Simultaneous  support  of 
heterogeneous  operating 
system  environments  for 
xSeries  and  BladeCenter 
Limited  warranty:  1  year 
on-site3 

IBM  Financing  Advantage 
Only  $147  per  month4 


‘All  prices  stated  are  IBM s  estimated  retail  selling  prices  as  of  May  3,  2005.  Prices  may  vary  according  to  configuration  Resellers  set  their  own  prices,  so  reseller  prices  to  end  users  may 
vary  Products  are  subject  to  availability  This  document  was  developed  for  offerings  in  the  United  States.  IBM  may  not  offer  the  products,  features,  or  services  discussed  in  this  document  in 
other  countries.  IBM  Director  is  not  available  on  TotalStorage  systems.  !IBM  Director  must  be  installed  Telephone  support  may  be  subject  to  additional  charges.  For  on-site  labor  IBM  will 
attempt  to  diagnose  and  resolve  the  problem  remotely  before  sending  a  technician.  IBM  Global  Financing  terms  and  conditions  and  other  restrictions  may  apply.  Monthly  payment  provided 
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With  IBM®  Express  Servers  and  Storage™ 
designed  for  mid-sized  businesses,  help  is  here. 

You’ve  already  got  a  zillion  things  that  require  your 
attention  -  you  shouldn’t  have  to  worry  about  your  systems. 
That’s  why  IBM  Express  products  offer  enhanced  reliability, 
which  helps  them  do  their  job  so  you  can  focus  on  yours. 

Take  IBM  Director,  for  example.1  It  proactively  notifies  you 
of  a  potential  problem -up  to  48  hours  in  advance.  Or  our 
Calibrated  Vectored  Cooling  feature  available  on  select 
xSeries  systems.  It  cools  your  system  more  efficiently. 
This  means  more  features  can  be  packed  into  a  smaller 
server.  Giving  you  more  functionality  and  greater  flexibility. 

It’s  just  an  example  of  our  self-managing  features  that  help 
you  take  back  control  of  your  IT.  Which  can  help  lower 
your  maintenance  costs,  too.  Because  with  IBM  Express 
Servers  and  Storage,  innovation  comes  standard.  It’s  not 
optional.  Plain  and  simple,  it’s  built  in.2 

There’s  also  one  more  great  feature -your  IBM  Business 
Partner.  Which  means  you  can  have  a  one-to-one  chat 
with  someone  who  understands  your  industry  and  your 
business -and  who’s  located  in  your  neck  of  the  woods. 
And  for  mid-sized  businesses,  that’s  really  big  help  in  a 
really  big  way. 


S  THE  WORLD’S  HELP  DESK 


L earn  more  about  our  -full 
range  of  X&m  Express 

product*?.  And  -find  the 

X&m  Business  Partner 
near  you,  -  who  is 

trained  tv  jcnorJ  which 

systems  meet-  your  speci-ftc 

requirements. 

ibm.com/eserver/helpisherel 

1-800-1 BM-7777 
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IBM  TotalStorage  DS400  Express 

With  advanced  functionality,  the  DS400  provides 
an  exceptional  solution  for  work  group  storage 
applications.  It  supports  Intel  Xeon  Processor- 
based  servers  and  offers  Fibre  Channel  drives 
designed  for  high  performance,  and  hot-swap 
Ultra320  SCSI  drives  designed  for  high  reliability. 


System  features 

2GB  Fibre  Channel  storage 
systems  area  network  (SAN) 
3U  rack-mount  entry  level 
Starts  at  584GB  /  Scales  to  5.8TB 

From  $8,495* 


Simultaneous  support  of 
heterogeneous  operating 
system  environments  for 
xSeries  and  BladeCenter 
Limited  warranty:  1  year  on-site3 


IBM  Financing  Advantage 

Only  $234  per  month" 


is  for  planning  purposes  only  and  may  vary  based  on  customer  credit  and  other  factors  Rates  and  offerings  are  subject  to  change,  extension,  or  withdrawal  without  notice  IBM,  eServer 
BladeCenter.  xSeries.  TotalStorage,  IBM  Express  Servers  and  Storage.  Enterprise  X-Architecture  and  Xtended  Design  Architecture  are  trademarks  or  registered  trademarks  of  International 
Business  Machines  Corporation  in  the  United  States  and/or  other  countries.  Intel,  Intel  Inside,  the  Intel  Inside  logo,  and  Intel  Xeon  are  trademarks  or  registered  trademarks  of  Intel  Corporation  or 
its  subsidiaries  in  the  United  States  and  other  countries.  Other  company,  product,  and  service  names  may  be  trademarks  or  service  marks  of  others.  <y  2005  IBM  Corporation  All  rights  reserved 
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Systems  integrators  earn  their  living  making 
technologies  work  together.  Here,  some  veterans 
offer  advice  on  planning  and  executing  successful 
integration  projects.  BY  DREW  ROBB 
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oo  often,  promising  inte¬ 
gration  projects  wind  up 
as  expensive  flops.  The 
FBI’s  failed  four-year, 

$170  million  Virtual  Case 
File  project  is  only  the  lat¬ 
est  example  to  make  the 
news.  On  May  24,  FBI 
Director  Robert  Mueller  reported  to 
Congress  that  the  first  phase  of  the  re¬ 
placement  system  won’t  be  ready  until 
2006,  at  a  cost  yet  to  be  announced. 

While  few  integration  projects  are 
that  costly  in  pure  dollar  terms,  they 
can  still  make  or  break  an  organiza¬ 
tion.  With  the  increasing  commoditi¬ 
zation  of  both  hardware  and  software, 
technology  alone  is  no  longer  the  key. 
Rather,  business  success  hinges  on 
how  well  those  products  are  integrat¬ 
ed  to  advance  business  goals. 

“The  applications  themselves  are 
not  the  differentiator,”  says  John 
Schmidt,  president  of  the  Integration 
Consortium,  an  industry  group  work¬ 
ing  to  establish  standards,  guidelines 
and  best  practices  for  integration  proj¬ 
ects.  “It’s  how  well  you  can  glue  them 


all  together  and  connect  with  cus¬ 
tomers  and  suppliers.” 

Schmidt  has  worked  in  the  IT  indus¬ 
try  for  27  years  and  has  spent  the  past 
15  helping  major  North  American  and 
European  retail,  financial  and  telecom¬ 
munications  corporations  integrate 
their  systems.  Computerworld  asked 
Schmidt  and  other  experienced  sys¬ 
tems  integrators  for  advice  that  could 
help  IT  managers  with  their  integra¬ 
tion  projects. 

Getting  Agreement 

Systems  integration  is  often  thought  to 
refer  to  the  effort  to  make  systems 
work  together  harmoniously.  Perhaps 
less  understood,  however,  is  that  those 
systems  must  also  be  closely  aligned 
with  the  overall  business  strategy. 

“The  most  critical  phase  of  the  proj¬ 
ect  includes  really  understanding  its 
purpose  before  it  starts  and  interview¬ 
ing  all  stakeholders  to  find  out  their  de¬ 
finition  of  what  will  make  the  project 
successful,”  says  Bob  Woodruff,  CEO  of 
project  management  consulting  firm 
Robbins-Gioia  LLC  in  Alexandria,  Va. 


Unfortunately,  few  companies  ap¬ 
pear  to  heed  this  advice.  Woodruff  has 
worked  in  project  management  for  20 
years  and  says  that  people  with  the 
most  clout  in  an  organization  tend  to 
get  their  projects  funded,  whether  or 
not  they  are  the  most  important  pro¬ 
jects  for  the  company  as  a  whole.  This 
can  wreak  havoc  for  the  IT  staff. 

“These  sponsors  are  typically  un¬ 
aware  of  the  impact  caused  by  inserting 
new  technology  into  an  already  existing 
environment,”  he  says.  “This  leaves  the 
IT  manager  in  the  unenviable  position 
of  trying  to  integrate  systems  that  just 
don’t  work  well  together.” 

For  example,  Woodruff  is  oversee¬ 
ing  the  update  of  his  own  firm’s  enter¬ 
prise  architecture.  Systems  that  are 
based  on  Oracle  or  SQL  databases 
are  simple  to  integrate  —  just  write 
some  SQL  queries,  pull  the  data  out, 
reformat  it  and  dump  it  into  the  other 
system.  Systems  that  export  the  data 
into  an  Excel  spreadsheet  require  a 
bit  more  work.  Even  worse  are  the 
proprietary,  nondatabase  systems, 
some  of  which  require  manual  re- 
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entry  of  data  into  the  new  systems. 

“Some  pieces  we  may  not  convert  be¬ 
cause  of  the  cost  involved,  the  timing, 
the  real  value  to  the  company,”  Wood¬ 
ruff  says.  “If  we  are  going  to  replace  it 
in  a  year  or  two,  we  will  just  leave  it.” 

He  advises  avoiding  projects  with¬ 
out  sufficient  executive  sponsorship  or 
funding,  pet  projects  that  provide  only 
short-term  gain  and  projects  that  have 
ill-defined  requirements. 

To  be  fair,  though,  IT  can  also  be 
guilty  of  failing  to  coordinate  integra¬ 
tion  projects.  Michael  Kuhbock,  CEO 
of  K-Bear  Corp.,  a  business  strategy 
consulting  firm  in  Calgary,  Alberta, 
has  seen  cases  where  IT  departments 
bought  middleware  licenses,  assem¬ 
bled  project  teams  and  created  budgets 
before  consulting  with  the  business 
units. 

“On  one  case,  it  took  another  three 
months  to  bring  the  business  on 
board,”  Kuhbock  says.  “That  happens 
day-to-day  in  the  market.” 

Assembling  the  Team 

After  hashing  out  the  project  scope 
and  purpose,  it’s  time  to  assemble  the 
integration  team.  That  can  involve  a 
mix  of  internal  and  external  resources. 

“IT  managers  can  find  the  expertise 
they  need  in  several  places,”  says  Liz 
Mann,  managing  director  of  Mycroft 
Inc.,  an  identity  management  and  secu¬ 
rity  firm  in  New  York.  “They  can  find 
it  within  their  own  organization,  they 
can  utilize  product-specific  expertise 
from  the  vendors,  and  they  can  use 
expertise  from  integration  consulting 
companies.” 

Major  projects  require  expertise  in  a 
broad  array  of  technologies. 

“There  have  been  many  waves  of 
application  technology  over  the  years 
that  seem  to  move  in  regular  seven- 
year  cycles  —  for  example,  main¬ 
frames  to  mini-  to  microcomputers, 
or  monolithic  to  client/server  to  Web 
service  applications,”  Schmidt  says. 
“The  shift  from  one  wave  to  the  next 
is  neither  instantaneous  nor  necessari¬ 
ly  economically  justified,  so  an  inte¬ 
gration  methodology  must  deal  with 
three  to  four  generations  of  technol¬ 
ogy  at  once.” 

While  the  right  mix  of  technical 
skills  is  critical,  integration  projects 
can  be  scuttled  by  the  “religious”  wars 
surrounding  some  technologies. 

“You  should  stay  agnostic  as  applied 
to  technology  and  stay  away  from 
those  who  are  devout,”  says  Gerard 
McGowan,  vice  president  of  technol¬ 
ogy  and  services  at  Innovativ  Inc.,  an 
integrator  in  Edison,  N.J. 

Schmidt  says  this  also  applies  when 


FIVE  LAWS  OF  INTEGRATION 


John  Schmidt,  president  of  the  Integration  Consortium,  has  worked  in  IT  for  nearly  three 
decades.  He  has  spent  half  of  that  time  managing  large-scale  systems  integration  projects 
for  telecoms,  financial  institutions,  retailers  and  other  businesses  in  the  U.S.,  Canada  and 
Europe.  Schmidt  sums  up  his  experience  in  what  he  calls  “The  Five  Laws  of  Integration.” 

The  whole  is  greater  than  the  sum  of  the  parts.  “A  false  notion  a  lot  of  people  have 
i  is  that  you  can  decompose  the  job  into  its  component  parts,”  Schmidt  says.  “But  when 
1  you  do  that,  end-to-end  dependencies  get  lost  and  you  don’t  see  the  impact  of  a  change 
on  a  system  that  is  four  or  five  systems  down  the  chain.” 
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There  is  no  end  state.  Integration  is  an  ongoing  process,  not  a  final  destination.  De¬ 
ploying  the  application  is  just  the  beginning.  It  must  remain  useful  despite  later 
changes  in  business  needs  or  operating  environment. 


There  are  no  universal  standards.  “Even  standards  themselves  change  and 

morph,  and  there  are  vendor-specific  implementations,"  Schmidt  says.  “Standards  are 
great,  but  you  have  to  be  practical.  Standards  are  not  going  to  solve  all  your  problems." 


Information  adapts  to  meet  local  needs.  Rather  than  trying  to  impose  an  enter¬ 
prise  data  model  that  precisely  defines  the  information  within  all  the  applications  the 
company  uses,  gain  agreement  on  information  motion  within  the  organization. 


All  details  are  relevant.  Modeling  changes  involves  abstracting  away  details  in  order 
to  make  complex  data  more  understandable.  But  even  items  such  as  software  versions 
or  drivers  can  produce  significant  differences,  so  test  the  actual  production  system. 

Don’t  just  rely  on  the  model.  _  _  , , 

-Drew  Robb 


selecting  a  consultant  or  vendor  to  join 
the  project.  When  someone  tries  to 
present  a  single  solution,  such  as  im¬ 
plementing  a  service-oriented  archi¬ 
tecture,  he  shows  that  person  the  door. 

“It  is  not  that  a  service-oriented 
architecture  is  bad,  but  it  is  presented 
as  if  it  will  solve  all  your  integration 
problems,”  he  explains.  “There  are  no 
silver-bullet  solutions,  and  you  should 
avoid  that  pitfall.” 

Limits  of  Standards 

An  issue  raised  by  several  of  the  inte¬ 
grators  is  that  while  you  should  defi¬ 
nitely  look  to  incorporate  industry 
standards  when  designing  an  enter¬ 
prise  architecture,  they  don’t  necessar¬ 
ily  guarantee  interoperability. 

“Even  successful  standards,  such 
as  TCP/IP,  are  not  universal,”  says 
Schmidt.  “When  it  comes  to  software 
standards  such  as  Cobol  or  Java,  inter¬ 
operability  and  transportability  come 
at  the  expense  of  vendor-specific  ex¬ 
tensions,  forcing  developers  to  use  a 
less-than-ideal  core  set  of  ‘pure’  lan¬ 
guage  features.” 

This  is  particularly  true  when  imple¬ 
menting  new  technologies.  McGowan 
points  out  that  while  voice  over  IP  is 
becoming  more  popular,  it’s  still  better 
to  rely  on  a  single  vendor  than  to  hope 
that  pieces  coming  from  different  com¬ 
panies  will  work  together  properly. 

“There  is  talk  about  generic  [Ses¬ 
sion  Initiation  Protocol]  stacks  and 
open-source  SIP,  but  when  you  try  to 
integrate  that  stuff,  it  tends  to  get  rela¬ 


tively  ugly,  relatively  quickly,”  Mc¬ 
Gowan  says. 

The  same  applies  for  authentication, 
according  to  Mann.  The  Security  As¬ 
sertion  Markup  Language  (SAML)  is 
designed  to  allow  the  exchange  of  au¬ 
thentication  materials  between  dissim¬ 
ilar  authentication  systems  or  multiple 
versions  of  a  single  system  that  have 
been  installed  across  a  corporate  or 
divisional  boundary.  But  developers 
have  options  in  how  they  implement 
the  standard,  so  although  different 
products  can  be  made  to  talk  to  one 
another,  they  won’t  necessarily  do  so 
out  of  the  box. 

“You  may  find  that  two  vendors  are 
SAML-compliant,  but  when  you  try  to 
make  that  exchange,  it  doesn’t  work,” 
Mann  says.  “It  is  not  that  either  one 
failed  to  implement  the  standard,  but 
they  both  did  it  slightly  differently.” 

But  these  problems  tend  to  disap¬ 
pear,  or  at  least  get  easier  to  deal  with, 
as  time  goes  on.  “The  more  mature 
technologies  tend  to  have  good,  well- 
proven  cross-vendor  support,”  says 
McGowan. 

No  Five-Year  Plans 

Because  technology  and  business 
needs  are  constantly  changing,  you 
can’t  operate  with  Soviet-style  five- 
year  plans.  Mergers  and  acquisitions, 
software  and  hardware  updates,  chang¬ 
ing  economic  conditions  and  numer¬ 
ous  other  factors  all  mandate  achiev¬ 
ing  shorter-term  results.  So  break  larg¬ 
er  projects  down  into  small  pieces. 


“I  think  people  recognize  today  that 
new  technology  deployments  are  an 
ongoing  process,”  says  Mann.  “They 
don’t  do  these  ‘pie  in  the  sky’  projects 
anymore.” 

She  recommends  breaking  longer- 
term  projects  into  90-day  chunks,  each 
with  a  discrete  deliverable. 

“If  you  take  too  long  to  deliver  infra¬ 
structure  and  discrete  successes  are 
not  noticeable,  you  will  probably  lose 
your  funding  or  lose  momentum  on 
your  project,”  Mann  says. 

In  working  on  smaller  pieces,  how¬ 
ever,  don’t  lose  sight  of  the  bigger  pic¬ 
ture.  It  requires  a  balance  between  the 
strategic  and  the  tactical,  and  every  bit 
must  advance  the  overall  long-term 
business  and  IT  plans. 

“Integration  is  often  seen  as  a 
project-based  technological  event 
rather  than  a  mission-critical,  enter¬ 
prisewide  business  strategy,”  Kuhbock 
cautions.  “We  need  to  change  that.” 

Integrating  Expertise 

Successful  integration  requires  that 
you  continually  gain  and  update  infor¬ 
mation  on  the  best  ways  to  link  sys¬ 
tems.  One  way  to  achieve  this  is  to  be¬ 
come  active  in  trade  groups,  such  as 
the  Integration  Consortium,  that  de¬ 
velop  and  share  information  on  how 
to  integrate  systems.  You  probably 
won’t  be  the  first  one  to  try  a  particu¬ 
lar  type  of  project,  and  you’d  be  better 
off  learning  the  lessons  from  people 
who  have  been  through  it  before  than 
finding  out  on  your  own  12  months 
into  the  project. 

“It  is  important  for  end  users  and 
suppliers  to  engage  in  collaborative 
efforts  in  the  industry,”  says  Schmidt. 
“When  you  do,  play  an  active  role  in 
these  organizations;  don’t  just  read  the 
papers  others  write.” 

Kuhbock  emphasizes  that  integra¬ 
tion  failures  often  boil  down  to  weak¬ 
nesses  in  the  personnel,  not  just  the 
technology,  and  training  on  integration 
is  essential  for  success. 

“Then  we  can  achieve  a  100%  suc¬ 
cess  rate  instead  of  the  failure  rates  we 
hear  about  now,”  he  says.  “An  automo¬ 
bile  manufacturer  wouldn’t  make  it  if 
three  out  of  10  cars  it  built  couldn’t 
make  it  off  the  lot.”  O  54478 


Robb  is  a  Computerworld  contributing 
writer  in  Los  Angeles.  Contact  him  at 
drewrobb@attbi.com. 


BUILDING  COMPETENCE 

For  more  on  how  to  build  expertise  and  pass  it  on 
within  your  company,  go  to  our  Web  site: 
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HOW  MANY  PEOPLE  DOES 
TO  SUPPORT  A  SINGLE 

(THAT’S  TOO  MANY.) 


With  IBM®  Express  Servers  and  Storage™  designed  for 
mid-sized  businesses,  help  is  here. 

Servers  should  support  a  business,  not  the  other  way  around. 
That’s  why  IBM  Express  Servers  have  self-managing  features:  so 
that  our  servers  can  virtually  run  themselves.  What's  more,  with 
IBM  Express  Servers  and  Storage,  innovation  comes  standard. 
Take  the  OpenPower™  710  Express,  for  instance.  It’s  specially 
tuned  for  Linux®  and  offers  the  reliability  of  POWER5™  technology 
at  a  surprisingly  low  price.’ 
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Tuned  for  Linux 

IBM  eServer  OpenPower  710  Express 

System  features 

Increase  computing  power,  availability  and  scalability 
in  a  rack  dense  environment 


And  while  you  can’t  be  in  two  places  at  the  same  time,  you  might 
want  to  look  into  the  innovative  server  feature  that  can.  For  example, 
the  remarkable  Advanced  POWER™  Virtualization  option  -  it  lets 
one  OpenPower  710  Express  act  as  many  virtual  ones. 

On  top  of  that  there’s  IBM  TotalStorage®  products,  which  offer  a  wide 
range  of  disk,  tape,  and  storage  software  solutions  -  so  you  can 
choose  the  right  options  to  meet  the  growing  needs  of  your  company. 

There’s  also  one  more  great  feature  -  your  IBM  Business  Partner. 
Which  means  you  can  talk  to  someone  who  understands  your 
industry  and  your  business  -  and  who’s  located  in  your  neck  of  the 
woods.  And  for  mid-sized  businesses,  that's  really  big  help  in  a 
really  big  way. 
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Ideal  for  consolidation  of  infrastructure  workloads 
(Web  serving,  file,  print,  security  applications) 

Robust  64-bit  mainframe-inspired  POWER5  systems 

2-way  19“  rack  server 

Up  to  32GB  of  memory 

Optional  Advanced  POWER  Virtualization' 

DB2*  Express  Discover  CD 

Limited  warranty:  up  to  3  years  on-site? 

From  $4,477* 


IBM  Financing  Advantage 

Only  $124  per  month' 


’All  prices  staled  are  IBM's  estimated  retail  selling  prices  that  were  correct  as  of  May  6.  2005  Prices  may  vary  according  to  configuration.  Resellers  set  their  own  prices,  so  reseller 
prices  to  end  users  may  vary.  Offers  are  for  business  customers  only  and  are  subject  to  availability.  This  document  was  developed  for  offerings  in  the  United  States.  IBM  may  not  offer 
the  products,  features,  or  services  discussed  in  this  document  in  other  countries.  'The  Linux  operating  system  for  the  OpenPower  710  Express  must  be  purchased  separately.  Price 
does  not  include  virtualization  option.  ^Telephone  support  may  be  subject  to  additional  charges.  For  on-site  labor,  IBM  will  attempt  to  diagnose  and  resolve  the  problem  remotely  before 
sending  a  technician.  SIBM  Global  Financing  terms  and  conditions,  and  other  restrictions  may  apply.  Monthly  payments  provided  are  for  planning  purposes  only  and  may  vary  based 
on  customer  credit  and  other  factors.  Rates  and  offerings  are  subject  to  change,  extension  or  withdrawal  without  notice.  “Customer  Replaceable  Unit  (CRU)  service  is  available  in  most 
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Simplify  storage  management  to  improve  productivity 


IBM  TotalStorage  3580  Express 


IBM  TotalStorage  DS4300  Express5 


The  3580  Express  helps 
address  your  growing  storage 
requirements  and  the 
problem  of  shrinking  backup 
windows.  It  supports  cost- 
effective  backup,  save  and 
restore,  and  data  archiving. 

System  features 

Built  on  Ultrium®  3  technology 

Read/write  compatible  with 
cartridges  written  by 
Ultrium  2  drives 

Read  compatible  with 
Ultrium  1  cartridges 

Up  to  400GB  cartridge  capacity. 
Up  to  800GB  with 
2  to  1  compression 

Limited  warranty:  3  years4 

From  $5,850* 

IBM  Financing  Advantage 

Only  $167  per  month3 


With  a  scalable  design,  the 
DS4300  Express  is  designed 
to  provide  a  reliable  and 
affordable  storage  option  to 
help  simplify  your  data 
management  needs. 

System  features 

2GB  Fibre  Channel  SAN-ready 

3U  rack  mount  entry  level 
Scales  to  33.6TB 

Supports  up  to  112  Fibre  Channel 
disk  drives  -  with  optional 
EXP710  expansion  units6 

Heterogeneous  OS  support 

Limited  warranty:  3  years  on-site2 

From  $8,655* 

IBM  Financing  Advantage 
Only  $238  per  month3 
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DEFINITION 

Supercomputer  is  a  relative  term,  referring 
to  a  computer  that  leads  all  others  in  pro¬ 
cessing  capacity  and  calculation  speed  at 
the  time  it’s  introduced. 


BY  JAN  MATLIS 

UPERCOMPUTING  is  all 
about  pushing  out  the 
leading  edge  of  computer 
speed  and  performance. 

The  sports  metaphors  that 
arise  as  research  sites  com¬ 
pete  to  create  the  fastest  supercomput¬ 
er  sometimes  obscure  the  goal  of 
crunching  numbers  that  had 
previously  been  uncrunchable 
—  and  thereby  providing  in¬ 
formation  that  had  previously 
been  inaccessible. 

Supercomputers  have  been 
used  for  weather  forecasting,  fluid 
dynamics  (such  as  modeling  air  flow 
around  airplanes  or  automobiles)  and 
simulations  of  nuclear  explosions  — 
applications  with  vast  numbers  of  vari¬ 
ables  and  equations  that  have  to  be 
solved  or  integrated  numerically 
through  an  almost  incomprehensible 
number  of  steps,  or  probabilistically 
by  Monte  Carlo  sampling. 

The  first  machine  generally  referred 
to  as  a  supercomputer  (though  not  of¬ 
ficially  designated  as  one),  the  IBM 
Naval  Ordnance  Research  Calculator, 
was  used  at  Columbia  University  from 
1954  to  1963  to  calculate  missile  trajec¬ 
tories.  It  predated  microprocessors, 
had  a  clock  speed  of  1  microsecond 
and  was  able  to  perform  about  15,000 
operations  per  second. 

About  half  a  century  later,  the  latest 
entry  to  the  world  of  supercomputers, 
IBM’s  Blue  Gene/L  at  Lawrence  Liver¬ 
more  National  Laboratory,  will  have 
131,072  microprocessors  when  fully 
assembled  and  was  clocked  at  135.3  tril¬ 
lion  floating-point  operations  per 
second  (TFLOPS)  in  March. 

The  computer  at  Livermore  will  be 
used  for  nuclear  weapons  simulations. 
The  Blue  Gene  family  will  also  be  used 
for  biochemical  applications,  reflecting 
shifts  in  scientific  focus,  making  intri¬ 
cate  calculations  to  simulate  protein 
folding  specified  by  genetic  codes. 


The  early  history  of  supercomputers 
is  closely  associated  with  Seymour 
Cray,  who  designed  the  first  officially 
designated  supercomputers  for  Con¬ 
trol  Data  Corp.  in  Minneapolis  in  the 
late  1960s.  His  first  design,  the  CDC 
6600,  had  a  pipelined  scalar  architec¬ 
ture  and  used  the  RISC  instruction  set 
that  his  team  developed.  In  this  archi¬ 
tecture,  a  single  CPU  overlaps 
fetching,  decoding  and  execut¬ 
ing  instructions  to  process  one 
instruction  each  clock  cycle. 

Cray  pushed  the  number¬ 
crunching  speed  available  from 
the  pipelined  scalar  architecture  with 
the  CDC  7600  before  developing  a 
four-processor  architecture  with  the 
CDC  8600.  Multiple  processors,  how¬ 
ever,  raised  operating  system  and  soft¬ 
ware  issues. 

When  Cray  left  CDC  in  1972  to  start 
his  own  company,  Cray  Research  Inc., 
in  his  boyhood  hometown  of  Chippe¬ 
wa  Falls,  Wis.,  he  abandoned  the  multi¬ 
processor  architecture  in  favor  of  vec¬ 
tor  processing,  a  split  that  divides  su¬ 
percomputing  camps  to  this  day. 

Cray  Research  pursued  vector  proc¬ 
essing,  in  which  hardware  was  de¬ 
signed  to  unwrap  “for”  or  “do”  loops. 
Using  a  CDC  6600,  the  European  Cen¬ 
tre  for  Medium-Range  Weather  Fore¬ 


casts  (ECMWF)  produced  a  10-day 
forecast  in  12  days.  But  using  one  of 
Cray  Research’s  first  products,  the 
Cray  1-A,  the  ECMWF  was  able  to  pro¬ 
duce  a  10-day  forecast  in  five  hours. 

National  Pride 

Throughout  their  early  history,  super¬ 
computers  remained  the  province  of 
large  government  agencies  and  gov¬ 
ernment-funded  institutions.  The  pro¬ 
duction  runs  of  supercomputers  were 
small,  and  their  export  was  carefully 
controlled,  since  they  were  used  in 
critical  nuclear  weapons  research. 
They  were  also  a  source  of  national 
pride,  symbolic  of  technical  leadership. 

So  when  the  National  Science  Foun¬ 
dation  (NSF)  decided  in  1996  to  buy  a 
Japanese-made  NEC  supercomputer 
for  its  Colorado  weather-research  cen¬ 
ter,  the  decision  was  seen  as  another 
nail  in  the  coffin  of  U.S.  technological 
greatness.  Antidumping  legislation 
was  brought  to  bear  against  the  impor¬ 
tation  of  Japanese  supercomputers, 
which  were  and  still  are  based  on  im¬ 
provements  on  vector  processing. 

But  within  two  years  of  the  NSF’s 
decision,  the  supercomputing  land¬ 
scape  changed.  The  antidumping  deci¬ 
sion  was  revoked.  And  the  ban  on  ex¬ 
porting  supercomputers  to  nuclear- 
capable  nations  was  also  partially  re¬ 
scinded.  What  had  happened? 

For  one  thing,  microprocessor 
speeds  found  on  desktops  had  over¬ 
taken  the  computing  power  of  yester¬ 
year’s  supercomputers.  Video  games 
were  using  the  kind  of  processing 
power  that  had  previously  been  avail¬ 
able  only  in  government  laboratories. 
The  first  Bush  administration  defined 
supercomputers  as  being  able  to  per¬ 
form  more  than  195  million  theoretical 
operations  per  second  (MTOPS).  By 
1997,  ordinary  microprocessors  were 
capable  of  over  450  MTOPS. 

Technologists  began  building  dis¬ 
tributed  and  massively  parallel  super- 


The  First 
Supercomputer 

The  logical  and  arithmetical 
section  of  IBM’s  Naval  Ord¬ 
nance  Research  Calculator,  the 
first  commonly  designated  su¬ 
percomputer,  took  up  the  wall 
of  a  room  and  was  composed  of 
vacuum  tubes,  resistors,  con¬ 
densers  and  crystal  rectifiers 
arranged  in  circuits. 


www.computerworld.com 


The  Unpack 
Benchmark 

IN  ORDER  TO  COMPARE  the  speeds  at 
which  supercomputers  operate,  they  need 
to  be  performing  the  same  tasks.  The  Un¬ 
pack  benchmark  measures  how  fast  a 
computer  solves  dense  systems  of  linear 
equations  and  measures  a  system’s  float¬ 
ing-point  computing  power. 

The  benchmark  is  based  on  Unpack,  a 
software  library  for  performing  numerical 
linear  algebra  on  digital  computers  that 
was  written  in  Fortran  by  computer  scien¬ 
tists  Jack  Dongarra,  Jim  Bunch,  Cleve 
Moler  and  Pete  Stewart  in  the  1970s. 

Dongarra,  now  a  distinguished  profes¬ 
sor  of  computer  science  at  the  University 
of  Tennessee,  later  introduced  the  Unpack 
benchmark,  which  is  used  as  the  perfor¬ 
mance  measure  for  ranking  supercomput¬ 
ers  in  the  Top500  list  of  the  world’s  fastest 
computers. 

-Jan  Maths 

computers  and  were  able  to  tackle  the 
operating  system  and  software  prob¬ 
lems  that  had  deterred  Seymour  Cray 
from  multiprocessing  40  years  before. 
Peripheral  speeds  had  increased  so 
that  I/O  was  no  longer  a  bottleneck. 
High-speed  communications  made  dis¬ 
tributed  and  parallel  designs  possible. 

As  a  result,  vector  processing  tech¬ 
nology  may  be  in  eclipse.  NEC  Corp. 
produced  the  Earth  Simulator  in  2002, 
which  uses  5,104  processors  and  vector 
technology.  According  to  the  Top500 
list  of  supercomputers  ( www.top500 . 
org),  the  Simulator  achieves  35.86 
TFLOPS.  IBM’s  Blue  Gene/L,  the 
current  leader,  is  expected  to  achieve 
about  200  TFLOPS.  It  consumes  15 
times  less  power  per  computation  and 
is  about  50  times  smaller  than  previous 
supercomputers. 

As  detailed  on  the  Top500  site,  the 
trend  in  supercomputers  is  toward 
clusters  of  scalar  processors  running 
Linux  and  leveraging  the  power  of  off- 
the-shelf  microprocessors,  open- 
source  operating  systems  and  50  years 
of  experience  with  the  middleware 
needed  to  pull  these  elements 
together.  ©  54435 


Matlis  is  a  freelance  writer  in 
Newton,  Mass.  He  can  be  reached 
at  jmtgpcmcm@aol.com. 
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Miore  Than  a  Token 
Overhaul  of  the  VPN 


A  move  to  two-factor  authentication  gives 
our  security  manager  a  chance  to  secure  his 
VPN  infrastructure.  By  Mathias  Thurman 


OUR  EXECUTIVE  TEAM 
finally  approved  the 
use  of  two-factor  au¬ 
thentication  for  all  vir¬ 
tual  private  network  access 
into  our  corporate  network. 
This  means  we’ll  get  to  over¬ 
haul  the  way  we  deploy  our 
Cisco  VPN  infrastructure. 

Currently,  when  a  user  re¬ 
quests  virtual  private  network 
access,  we  provide  the  VPN 
software  and  a  VPN 
profile  that  the  user 
has  to  import  into  the 
VPN  client. 

The  user  then 
launches  the  VPN 
software,  authenti¬ 
cates  and  is  placed  in 
a  group  that’s  defined  within 
the  Cisco  Secure  Access  Con¬ 
trol  Server  (ACS).  As  things 
now  stand,  all  groups  are 
configured  to  allow  access  to 
just  about  everything  in  the 
company. 

This  isn’t  very  secure,  of 
course,  because  a  user  within 
the  sales  organization,  for 
example,  has  the  ability  to 
reach  out  to  production  Unix 
servers.  Granted,  if  the  server 
was  configured  properly,  ac¬ 
cess  would  be  denied  if  the 
user  didn’t  have  a  valid  ac¬ 
count  on  the  Unix  server. 

But  if  the  server  wasn’t  con¬ 
figured  properly,  a  malicious 
user  could  gain  unauthorized 
access.  What’s  more,  a  mali¬ 
cious  user  who  isn’t  barred 
from  any  part  of  the  network 
could  attempt  any  number 
of  other  activities,  including 
denial-of-service  and  man-in- 
the-middle  attacks.  So,  as  we 
now  move  to  strong  two-factor 
authentication,  we  have  an 
opportunity  to  tie  down  our 
systems  much  more  securely. 
In  implementing  two-factor 


authentication,  we’re  using 
RSA  Security  Inc.’s  SecurlD 
tokens,  with  corresponding 
access  control  provided  by 
Cisco  Systems  Inc.  The  RSA 
SecurlD  token  servers  and  as¬ 
sociated  tokens  provide  only 
for  authentication;  the  tokens 
don’t  dictate  which  areas  of 
the  network  an  employee  will 
have  permission  to  access. 
This  authorization  piece  is 
handled  by  the 
Cisco  ACS. 

With  the  ACS, 
groups  of  users  are 
defined  and  then  as¬ 
signed  specific  net¬ 
works  or  hosts  that 
they  can  access. 

For  example,  a  contractor 
assigned  as  an  auditor  in  the 
finance  department  doesn’t 
need  access  to  human  re¬ 
sources  systems.  We  can  con¬ 
figure  a  group  within  the  ACS 
and  place  in  that  group  only 
the  finance  servers  that  the 
contractor  will  need  to  per¬ 
form  his  job,  plus  some  com¬ 
mon  areas  of  the  network, 
such  as  the  company  Web  site 
and  the  Exchange  e-mail 
servers. 

Once  we’ve  configured  all 
of  the  groups  we’re  going  to 
need,  it’s  just  a  matter  of  plac¬ 
ing  each  user  in  the  correct 
group.  So,  how  do  we  do  that? 
Manually  entering  thousands 


It’s  just  a  matter  of 
placing  each  user  in 
the  correct  group.  So, 
how  do  we  do  that? 


of  users  is  too  cumbersome 
and  time-consuming  to  be  an 
option.  For  this  task,  we’ll  turn 
to  a  directory  server.  We  use 
Lightweight  Directory  Access 
Protocol  for  many  functions 
within  the  company  and  have 
had  great  success  with  it. 

Our  LDAP  environment  is 
becoming  more  and  more  use¬ 
ful,  allowing  us  to  more  easily 
handle  chores  such  as  storing 
user  credentials  or  granting 
access-control  rights  for 
applications. 

Duplicating  Groups 

In  the  case  of  this  VPN  proj¬ 
ect,  we  want  to  create  the 
same  groups  within  LDAP  that 
we  have  defined  for  our  Cisco 
ACS  access  groups.  Once 
those  groups  exist  within 
LDAP,  a  help  desk  administra¬ 
tor  responding  to  an  approved 
and  verified  request  for  VPN 
access  can  simply  call  up  a 
Web-based  account-provision¬ 
ing  dashboard  and  mark  a 
checkbox  for  the  appropriate 
access  group. 

After  that,  when  the  user 
launches  his  VPN  client  and 
authenticates  with  the  Secur¬ 
lD  token,  the  Cisco  ACS  will 
first  look  to  see  if  the  user  ex¬ 
ists  within  the  ACS.  If  the  user 
can’t  be  found  there,  the  ACS 
will  go  out  to  our  LDAP  server 
to  see  if  he  exists  there. 

If  the  user  is  found  in  the 
LDAP  server  and  has  been  as¬ 
signed  to  a  corresponding  ac¬ 
cess  group,  then  he  will  be 
added  to  the  ACS  and  placed 
in  the  appropriate  access 
group.  And  if  the  user  isn’t 
found  in  the  LDAP  server, 
then  he  can  be  assigned  to  a 
default  restrictive  group. 

I  know  this  seems  like  a  lot 
of  transactions,  but  in  prac¬ 
tice,  it  should  take  only  a  cou¬ 
ple  of  seconds.  The  only  diffi¬ 
culty  we’re  having  is  that  the 
current  incarnation  of  the  Cis¬ 
co  ACS  has  some  restrictions 
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on  how  it  can  interoperate 
with  LDAP.  Once  those  issues 
are  resolved,  we  can  move  for¬ 
ward  with  the  proposed  archi¬ 
tecture. 

We’ve  decided  that  instead 
of  providing  our  users  with 
the  hardware  security  tokens, 
we  will  deploy  software  to¬ 
kens.  The  software  tokens  are 
installed  on  users’  PCs  and 
provide  the  same  level  of  se¬ 
curity  as  the  hardware  tokens. 
The  software,  combined  with 
a  unique  “seed”  file  and  a 
user-configured  PIN,  provides 
for  two-factor  authentication. 

The  software  frees  users 
from  having  to  carry  a  token 
with  them,  but  the  problem 
is  that  the  software  tokens 
aren’t  as  user-friendly  as  the 
hardware  tokens. 

With  the  hardware  tokens, 
a  user  inserts  his  PIN,  directly 
followed  by  the  number  dis¬ 
played  on  the  token,  which 
becomes  his  passcode. 

With  the  software  token, 
when  the  user  keys  in  his  PIN, 
the  token  presents  a  passcode, 
which  the  user  has  to  copy 
and  paste  from  within  the 
token  to  the  application  he’s 
accessing. 

The  software  tokens  have 
other  advantages,  since  they 
are  considerably  cheaper  and 
can  be  mass-deployed  more 
easily  than  the  hardware  —  we 
just  provide  Web  links  and  use 
provisioning  software. 

One  more  thing:  There’s  a 
nice  integration  feature  when 
using  the  Cisco  VPN  product 
with  the  RSA  software  tokens. 
When  the  user  accesses  the 
VPN,  he’s  prompted  only  for 
his  PIN,  and  on  the  back  end, 
the  software  automatically 
fills  in  the  appropriate  token 
code  from  the  RSA  software. 

So  for  now,  we’ll  continue  to 
define  our  access  groups  and 
come  up  with  a  work-around 
for  getting  users  from  LDAP 
to  the  Cisco  ACS.  I 


WHAT  DO  YOU  THINK? 

This  week's  journal  is  written  by  a  real  securi¬ 
ty  manager,  “Mathias  Thurman,"  whose 
name  and  employer  have  been  disguised  for 
obvious  reasons.  Contact  him  at  mathias_ 
thurman@yahoo.com,  or  join  the  discussion 
in  our  forum:  QuickLink  a1590 

To  find  a  complete  archive  of  our 
Security  Manager’s  Journals,  go  online  to 
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I  Silence  on  the  Wire:  A  Held 


a  somewhat  com¬ 


plex  mathematical 
equation  to  deter¬ 
mine  the  type  of 
browser  used  to  send 


IP  packets.  But  I  became  fas¬ 
cinated  by  his  approach  to 
network  security  from  a  re¬ 
connaissance  point  of  view; 
most  security  books  focus  on 
attacks.  Though  the  book 
probably  isn’t  for  entry-level 
security  pros,  senior  analysts 
and  engineers  will  find  it  use¬ 
ful.  Most  chapters  start  with 
an  interesting  anecdote  before 
getting  down  to  some  fairly 
technical  details.  Zalewski’s 


explanations  make  it  dear  that 
he's  tops  in  the  industry. 

-Mathias  Thurman 


CA  Reveals 
Antivirus  Raw 


Computer  Associates  Interna¬ 
tional  Inc.  disdosed  a  serious 
security  flaw  in  its  antivirus 
products.  The  bug,  which  af¬ 
fects  the  Vet  antivirus  engine 
underlying  CA’s  enterprise 
and  consumer  security  soft¬ 
ware,  could  be  exploited  by  a 
remote  attacker  via  a  specially 
crafted  Microsoft  Word  docu¬ 
ment  to  cause  a  heap  overflow 
and  execute  malicious  code, 
according  to  CA.  Enterprise 
users  received  a  patch  at  the 
beginning  of  this: 


Rles  Encrypted 
Held  Hostage 


A  hacker  has  found  a  way  to 
encode  computer  files  and 
hold  them  hostage  until  the 
victim  pays  for  a  decoder  tool, 
said  Websense  Inc.,  which  un¬ 
covered  the  extortion  attempt 
But  there’s  a  way  to  avoid  pay¬ 
ing  ransom:  Lurhq  Corp.  said  it 
found  the  encryption  scheme 
relatively  easy  to  break. 


Guide  to  Passive  Reconnais¬ 
sance  and  Indirect  Attacks,  by 
Michal  Zalewski  (No  Starch 
Press,  2005). 

When  I  first  flipped 
open  this  book,  I 
was  intimidated  by 
the  author's  use  of 
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UPS  Aims  to  Ease 
Trade  Management 

■  UPS  Trade  Management  Ser¬ 
vices  Inc.,  a  unit  of  UPS  Supply 
Chain  Solutions  in  Alpharetta, 

Ga.,  announced  a  software  suite 
designed  to  simplify  international 
trade  management.  UPS  Trade- 
Sense  is  aimed  at  helping  U.S. 
exporters  and  importers  manage 
customs  clearance  and  security 
regulations.  It  allows  companies 
to  keep  trade  data  in  one  location 
for  easier  management  and  con¬ 
nectivity  to  global  supply  chain 
partners.  The  software  also  has 
screen-level  security  protocols 
that  require  users  to  log  in  with  a 
personal  identification  code  and 
allow  access  only  to  parts  of  the 
system  they  are  authorized  to  use. 
UPS  TradeSense  is  available  now. 


Start-up  Releases 
Exchange  Tool 

■  Fremont,  Calif.-based  Zenprise 
Inc.’s  first  product  offers  real¬ 
time,  automated  diagnosis  and 
resolution  of  operational  prob¬ 
lems  across  Microsoft  Exchange 
e-mail  systems.  Due  to  ship  in 
August,  Zenprise  automatically 
analyzes  the  Exchange  environ¬ 
ment,  develops  historical  perfor¬ 
mance  baselines  and  predicts 
performance  problems.  Zenprise 
also  includes  a  diagnostic  and  re¬ 
pair  database  of  Exchange  symp¬ 
toms  and  causes.  Pricing  starts 
at  $15  per  user  per  year. 


IBM  Blade  Server 
Package  Debuts 

■  IBM  has  released  an  integrated 
blade  system  for  the  small-to- 
midsize  corporate  market  that's 
preconfigured  and  tested.  The 
system  is  also  preloaded  with 
IBM  Workplace  Services  Express 
and  other  software  on  an  IBM 
eServer  BladeCenter  HS20  sys¬ 
tem.  Pricing  starts  at  $120  per 
month  for  a  portal  server  that  can 
handle  20  users,  or  $160  per 
month  for  a  business  integration 
server  that  can  handle  up  to 
1,000  catalog  entries.  Other  pric¬ 
ing  options  are  available. 


DOUGLAS  SCHWEITZER 


Linux  Muscles  Into 
Microsoft’s  Space 


IS  LINUX  A  BETTER  CHOICE  for  business  than, 
say,  a  proprietary  operating  system  such  as 
Microsoft  Windows?  The  debate,  full  of  passion 
and  conviction,  rages  on  both  sides  of  this  issue. 
Over  the  past  several  years,  Linux  has  elevated 
itself  as  a  respectable  competitor  despite  Microsoft’s 
dominance  in  the  operating  systems  market.  Linux  is 
used  extensively  in  today’s  business  operating  plat¬ 


forms,  in  Web  servers,  the 
Domain  Name  System,  FTP, 
e-mail,  firewalls,  Web  host¬ 
ing,  network  monitoring  and 
desktop  applications,  for  ex¬ 
ample.  Some  form  of  Linux 
is  used  in  nearly  80%  of 
companies  today.  Most  of 
them  deploy  it  from  a  server 
level,  and  interest  in  desktop 
functionality  is  growing. 

The  rapid  migration  of  Linux 
inside  global  businesses 
and  government  agencies 
is  likely  related  to  the  in¬ 
crease  in  quality,  security 
and  cost-effectiveness  that  Linux 
provides. 

Of  course,  there  are  arguments  from 
both  sides.  But  when  you  compare  Linux 
and  Windows  applications  feature  for 
feature,  there  is  very  little,  if  anything, 
that  Microsoft  has  that  Linux  hasn’t  yet 
perfected. 

Security  and  reliability  are,  of  course, 
another  concern.  How  can  migrating 
businesses  be  sure  that  the  security  and 
reliability  of  their  networks  will,  at  the 
very  least,  stay  intact?  Looking  at  some 
facts  and  figures  provides  a  good  start. 

In  the  past  few  years,  Microsoft  has  ex¬ 
perienced  near-catastrophic  exploita¬ 
tions  with  the  MyDoom,  Nimda  and  MS 
Blaster  worms.  These  system  exploita¬ 
tions  affected  countless  users  and  cost 
individuals,  corporations  and  govern¬ 
ment  agencies  millions  of  dollars  in 
damages  and  downtime.  Since  then, 
Microsoft  has  had  to  account  for  the  in¬ 
advertent  release  of  part  of  its  sanctified 


source  code,  as  well  as  the 
much-publicized  Internet 
Explorer  vulnerabilities  that 
have  forced  many  users 
to  change  their  preferred 
Web  browsers.  In  response, 
Microsoft  attempted  to 
heighten  security  on  all  ap¬ 
plications  to  prevent  further 
incidents. 

It’s  not  as  if  Linux  hasn’t 
also  had  its  share  of  vulner¬ 
abilities.  The  notable  differ¬ 
ence,  though,  is  in  the  initial 
discovery  and  patching  of 
existing  vulnerabilities.  Vul¬ 
nerabilities  within  a  code  are,  for  the 
most  part,  inevitable,  but  users  will  find 
with  Linux  that  vulnerabilities  are  iden¬ 
tified  and  patches  are  released  quickly, 
in  many  cases  before  users  are  even 
aware  that  there’s  a  problem.  Moreover, 
the  Linux  community,  as  opposed  to  pro¬ 
prietary  vendors,  provides  innate  securi¬ 
ty  enhancements  and  affords  a  substan¬ 
tial  number  of  resources  from  develop¬ 
ers  in  the  community  to  ensure  that  even 
seemingly  insignificant  security  flaws 
are  properly  addressed. 

Since  security  and  reliability  go  hand 
in  hand,  it’s  a  fair  assumption  that  the  re¬ 
liability  of  Microsoft  systems  may  also 
be  lacking.  If  a  system  is  open  to  ex¬ 
ploitation,  downtime  as  a  result  of  a 
worm  or  virus  is  unavoidable.  Further¬ 
more,  with  such  restricted  access  to  the 
source  code,  it’s  possible  that  code  flaws 
and  bugs  aren’t  identified  as  readily, 
leaving  business-critical  applications 
sluggish  and  unpredictable.  Alternative¬ 
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ly,  Linux  uses  the  resources  of  a  collabo¬ 
rative  development  environment,  pro¬ 
viding  vendors  with  methodically  tested 
code,  minimizing  the  occurrence  of 
flaws  and  bugs.  In  addition,  this  design 
model  offers  rapid  application  evolution 
and  advanced  technologies  for  ever- 
changing  business  needs.  With  frequent 
application  updates  and  upgrades,  Linux 
systems  consistently  operate  efficiently 
and  effectively. 

“Linux  is  merely  a  Unix  derivative, 
and  Unix  is  a  better  operating  system  for 
business,”  says  programmer  Angel 
Gomez,  who  is  also  chief  technology  of¬ 
ficer  at  Datatek  Applications  Inc.  in 
Bridgewater,  N.J.  “Whether  it’s  SunOS  or 
OpenBSD,  they  all  have  one  thing  in 
common:  They  meet  the  Posix  applica¬ 
tions  interface,  which  means  that  busi¬ 
ness  programs  can  move  from  one  plat¬ 
form  to  another  without  any  changes.” 

Unix  was  the  very  first  nonproprietary 
networked  operating  system  and  has  ex¬ 
perienced  relatively  few  flaws.  Bell  Labs 
researchers  created  it  in  a  time  when 
perfection,  not  an  instant  return  on  in¬ 
vestment,  was  the  objective.  Because 
Linux  is  essentially  a  Unix  derivative,  it 
follows  the  same  mantra. 

Garnering  trust  in  an  open-source  op¬ 
erating  system  can  be  tough,  and  one  of 
the  major  downfalls  for  Linux  is  its  per¬ 
ceived  lack  of  end-user  support.  Al¬ 
though  that  may  have  been  true  in  years 
past,  the  rapid  adoption  of  Linux  for  its 
superior  quality  and  cost-effectiveness 
has  driven  Linux  vendors  to  provide 
comprehensive  technical  and  customer 
support.  Which  means,  according  to 
Gomez,  that  “new  hardware  does  not  im¬ 
ply  new  software.  When  a  business  has 
to  invest  in  a  custom  software  base,  it  is 
not  prudent  to  base  it  on  a  single  vendor 
proprietary  operating  system.” 

With  Linux,  the  uptime  is  high,  the 
price  is  low,  and  the  flexibility  is  amaz¬ 
ing.  ©  54488 
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ARE  MET  WITH  SWIFT 
AND  DECISIVE  ACTION 


MICROSOFT.COM/SECURITY/IT 

Microsoft 


Find  the  tools  and  guidance  you  need  for  a  well-guarded  network 
at  microsoft.com/security/ 


►  Microsoft  Windows  XP  Service  Pack  2:  Download  it  or 
free  and  get  stronger  system  control  and  proactive  protec  on 
against  security  threats. 

►  Free  Tools  &  Updates:  Download  free  software  like  Microsoft 
Baseline  Security  Analyzer  to  verify  that  your  systems  are 
configured  to  maximize  security.  Manage  software  updates 
easily  with  Windows  Server  Update  Services. 
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Microsoft  Risk  Assessment  Tool:  Complete  this  free,  Web-based 
self-assessment  to  help  you  evaluate  your  organization's  security 
practices  and  identify  areas  for  improvement. 

Internet  Security  and  Acceleration  Server  2004:  Download 
the  free  120-day  trial  version  to  evaluate  how  the  advanced 
application-layer  firewall,  VPN,  and  Web  cache  solution  can 
improve  network  security  and  performance. 


Microsoft 


CASE  STUDY 

Software  Reuse: 
Making  It  Work 

DTE  Energy  has  set  up  its 
own  “open-source”  software 
operation.  Here’s  how  it  got 
in-house  developers  to  buy 
into  reuse.  Page  37 


Q&A 

Innovation  at  the  Edge 

The  future  lies  at  the  edge  of  your 
company,  where  it  can  reach  across 
geographic,  corporate  and  even 
competitive  boundaries  to  add  val¬ 
ue,  say  authors  John  Hagel  III  (far 
left)  and  John  Seely  Brown.  Page  38 


OPINION 

We’re  Mad  as 
Hell,  But . . . 

Users  may  be  fed  up  with  lop¬ 
sided  software  licenses,  says 
Gary  H.  Anthes,  but  most  aren’t 
yet  ready  to  do  the  hard  work 
of  fighting  back.  Page  40 


YOU  DON’T  HAVE  TO  BE  AN  IT  VETERAN  to  have  at 
least  one  scar  that  was  inflicted  by  the  merger  or 
acquisition  of  one  of  your  major  technology 
providers.  For  Rick  Omartian,  IT  chief  financial 
officer  at  The  Guardian  Life  Insurance  Company 
of  America  in  New  York,  make  that  two,  going  on 
three.  After  watching  Meta  Group  get  eaten  by  Gartner  Inc.  and 
PeopleSoft  get  chomped  by  Oracle  Corp.,  he’s  now  focused  uneas¬ 
ily  on  the  CRM  market  as  a  customer  of  the  beleaguered  Siebel 
Systems  Inc. 

Meanwhile,  Robert  Robinson,  business  systems  supervisor  at 
Durr  Industries  Inc.  in  Plymouth,  Mich.,  is  one  of  many  former 


Here’s  how  to  antici¬ 
pate  and  respond 
when  a  major  supplier 
is  getting  swallowed 
up.  By  Mary  Brandel 
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J.D.  Edwards  customers  now  experiencing  what 
some  might  call  a  “twofer.”  Now  that  Oracle  has  ac¬ 
quired  PeopleSoft,  which  two  years  ago  bought  J.D. 
Edwards,  “it’s  like  watching  a  fish  get  swallowed  by  a 
seal,  and  then  the  seal  gets  swallowed  by  a  whale,”  he 
says.  “Everyone’s  aghast  at  the  seal  [being  swal¬ 
lowed],  but  no  one  remembers  the  fish.” 

And  more  merger  and  acquisition  (M&A)  activity 
is  forecast.  Leaving  out  top  vendors  like  Microsoft 
Corp.,  Hewlett-Packard  Co.,  Oracle,  SAP  AG  and 
IBM,  “if  you  look  at  the  eight-to-10-year  life  cycle  of  a 
major  software  product,  you  can  assume  that  30%  to 
40%  of  those  companies  will  be  acquired,”  says  Dale 
Kutnick,  director  of  research  at  Gartner. 

Last  year,  according  to  Kutnick,  M&As  among 
technology  companies  reached  their  highest  levels 
since  2001,  and  he  expects  that  trend  to  continue  this 
year.  The  upshot:  IT  executives  should  be  poised  to 
anticipate  and  respond  to  vendor  M&As. 

Here  are  some  tips  from  M&A  veterans  about  how 
to  survive  —  and  maybe  even  benefit  —  when  your 
IT  vendors  merge. 

UNDERSTAND  THE  VENDOR.  If  your  vendor  is  being 
acquired,  you  need  to  understand  the  acquirer.  Ac¬ 
cording  to  Lou  Mazzucchelli,  a  fellow  at  Cutter  Con¬ 
sortium  in  Arlington,  Mass.,  there  are  two  types  of 
acquirer:  those  interested  in  milking  maintenance 
revenues  from  a  strong  but  stagnant  installed  base, 
and  those  intending  to  grow  their  customer  base  by 
subsuming  a  competitor. 

With  the  first  type,  “there’s  a  vested  interest  in 
keeping  you  as  part  of  the  installed  base,”  he  says. 

The  second  type  is  more  problematic  because 
there’s  no  reason  for  two  competitive  products  to  co¬ 
exist.  “If  you’re  on  the  wrong  side,  your  application  is 
going  away,”  Mazzucchelli  says.  “I  wouldn’t  be  sur¬ 
prised  if  they  used  strong  incentives  for  the  cus¬ 
tomer  to  switch  sooner  rather  than  later.”  Even  if  the 
vendor  promises  to  keep  the  product  alive,  don’t  look 
for  new  features. 

GET  A  SECOND,  THIRD,  EVEN  FOURTH  OPINION.  Nobody 
holds  all  the  pieces  to  an  M&A  puzzle,  so  Omartian 
gets  lots  of  opinions.  When  he  first  heard  the  rum¬ 
blings  that  Oracle  intended  to  buy  PeopleSoft,  he 
consulted  a  range  of  sources.  They  included  Guard¬ 
ian’s  investments  division,  other  companies  using  the 
vendors’  products,  research  firms,  industry  analysts, 
independent  user  groups,  media  articles  and  senior 
executives  at  both  vendor  companies.  He  asked 
about  the  likelihood  of  the  merger’s  success,  what 
both  companies  stood  to  lose  or  gain  and  possible 
outcomes  for  product  lines. 

When  talking  to  the  acquirer,  the  more  senior  the 
manager  you  buttonhole,  the  better,  Omartian  says, 
since  higher-level  executives  are  more  likely  to  stick 
around  postmerger.  But  balance  that  input  with  what 
you  hear  among  the  rank  and  file.  “Look  at  informa¬ 
tion  from  all  your  sources,”  he  says. 

TRUST,  BUT  VERIFY.  Particularly  when  talking  with 
corporate  representatives,  don’t  believe  everything 
you  hear  unless  it’s  also  in  writing.  “I’ve  been 
through  a  lot  of  mergers,  and  things  change  day  to 
day,”  Omartian  says.  “Nothing’s  certain  in  a  merger.” 

Others  agree.  During  the  PeopleSoft/Oracle  merg¬ 
er,  many  customers  insisted  on  meeting  directly  with 
CEO  Larry  Ellison  before  they  believed  reports  that 
they’d  be  supported  through  2013,  says  Jason  Aver- 


WHAT  THEY’RE  UP  TO 


Mergers  and  acquisitions  happen  for  various  rea¬ 
sons,  and  smart  users  need  to  know  what  their  ven¬ 
dors  are  up  to.  Dale  Kutnick,  director  of  research  at 
Gartner,  breaks  M&As  into  three  categories: 

Accretive 

■  Most  current  deals  fit  into  this  category.  They’re  in¬ 
tended  to  improve  margins  via  cost-cutting;  combining 
overlapping  products,  services  and  processes;  and  in¬ 


cur  when  the  resulting  merger  combines  best  practices 
from  the  two  companies’  processes  or  capabilities,  such 
as  customer  management  or  product  innovation.  An  ex¬ 
ample  is  Cisco  Systems  Inc.’s  M&A  activity  in  the  late 
1990s.  Cisco  allowed  its  new  acquisitions  to  concen¬ 
trate  on  product  innovation  and  maintain  their  creative 
cultures  while  integrating  the  new  units  into  its  own 
well-established  business  processes. 

■  These  deals  result  when  major  changes  in  business 
processes  reshape  the  market.  An  example  is  BEA  Sys¬ 
tems  Inc.’s  1998  acquisition  of  WebLogic.  BEA  turned  the 
new  unit’s  Java-based  application  server  into  its  main 
product  line  and  top  asset. 

book,  CEO  at  Knowledge  Infusion,  a  consulting  firm 
in  Danville,  Calif. 

Robinson  is  applying  the  skepticism  he  acquired 
during  the  J.D.  Edwards  acquisition  to  the  Oracle 
purchase  of  PeopleSoft.  “Questions  get  asked  and  an¬ 
swered,  but  it’s  just  words,”  he  says.  “What  it  really 
comes  down  to  are  the  deeds.” 

For  instance,  Oracle  has  promised  to  work  through 
the  Quest  International  User  Group  to  fulfill  re¬ 
quests  for  product  enhancements  from  the  former 
J.D.  Edwards  —  a  practice  PeopleSoft  dropped,  much 
to  Robinson’s  dismay,  when  it  bought  that  company. 
At  an  upcoming  Quest  meeting,  the  group  plans  to 
submit  some  requests  to  check  that  promise.  “It’s  a 
test  balloon  to  see  if  the  process  will  work,”  Robin¬ 
son  says. 

IF  YOU  HAVE  LEVERAGE,  ACT  QUICKLY.  Companies  with 
a  large  investment  in  the  acquired  technology  have 
some  bargaining  to  do.  In  the  early  part  of  a  merger, 
acquiring  firms  are  particularly  sensitive  about  stabi¬ 
lizing  revenues.  That’s  the  time  customers  have  the 
most  leverage,  and  that’s  why  Mazzucchelli  advises 
that  you  huddle  with  the  acquiring  vendor  quickly. 

“At  the  instant  of  the  acquisition’s  closing,  if  you 
have  any  leverage  at  all,  play  your  cards  immediately 
and  let  them  know,  ‘I  get  my  concessions  or  I  walk,’  ” 
he  says.  “You’ve  got  to  play  hardball,  and  the  longer 
you  wait,  the  less  negotiating  power  you  have.” 

Omartian  agrees.  “When  we  meet  with  senior 
managers,  we  make  clear  to  them  what  we’re  happy 
with  in  the  relationship  and  that  if  we  don’t  see  that 
continuing,  we  won’t  be  in  a  long-term  relationship,” 
he  says. 


■  These  M&As  are  more  beneficial  to  users.  They  oc- 


MEAN  IT.  If  you  threaten  to  walk,  you  have  to  be 
prepared  to  do  it,  and  that  means  having  an  alterna¬ 
tive  in  mind.  Start  by  knowing  the  value  of  the  soft¬ 
ware  to  your  organization,  Mazzucchelli  says.  Aver- 
book  points  out  that  companies  tend  to  use  only  20% 
to  30%  of  the  features  in  a  software  application,  so 
find  out  which  ones  you  actually  need. 

Begin  running  tests  of  open-source  versions  of 
your  applications.  Even  if  you  can’t  feasibly  fall  back 
on  them,  just  going  through  the  motions  should  be 
enough  to  get  the  vendor  to  take  the  threat  seriously. 
“If  I’m  highly  dependent  on  a  proprietary  application 
that  does  function  x,  I  want  an  open-source  version 
in  my  lab  so  I  can  use  that  to  put  pressure  on  a  ven¬ 
dor,”  Mazzucchelli  says. 

HAVE  A  PLAN.  Prepare  what  Averbook  calls  a  “tech¬ 
nology  strategy  map,”  aligning  the  goals  and  initia¬ 
tives  of  your  company  over  the  next  three  years  with 
the  technology  to  support  those  goals.  This  will  en¬ 
able  you  to  identify  technology  gaps,  as  well  as  one 
to  three  vendors  that  offer  the  required  technology. 
When  you  know  what  you  have  and  what  you  need 
going  forward,  you  can  make  faster  decisions  about 
whether  the  new,  combined  company  meets  your 
needs,  Averbook  says. 

It  beats  freezing  development  while  the  merger 
shakes  out,  which  can  take  six  months  to  a  year. 
“That’s  like  when  two  airlines  merge,  you  stop  flying 
until  you  figure  out  the  new  pricing  model,”  Aver¬ 
book  says.  “In  this  new  era  of  software  consolidation, 
it’s  important  for  customers  to  take  control  of  their 
own  path.” 

BUILD  IN  PROTECTION.  Use  your  software  contracts 
to  guarantee  service  levels  and  maintenance  costs, 
Kutnick  says,  and  consider  requesting  guaranteed 
discounts  on  maintenance  costs  in  the  event  of  an 
acquisition. 

Acquirers  may  not  honor  the  level  of  service  out¬ 
lined  in  a  contract,  Kutnick  says,  but  at  least  you  have 
a  strong  negotiating  point  to  start  with. 

“As  long  as  you’re  contractually  obligated  to  re¬ 
ceive  that  level  of  service,  you  have  an  out,”  Omar¬ 
tian  adds.  Guardian  also  makes  sure  that  it  retains 
rights  to  escrow  code  when  signing  on  with  smaller 
vendors,  so  it  can  continue  development  even  if  the 
vendor  disappears. 

BE  SUSPICIOUS.  Learn  to  read  signs  that  a  company 
is  a  potential  target  based  on  moves  it’s  making.  “If 
they’re  issuing  a  lot  of  press  releases  or  expanding 
into  new  functional  areas,  you  can  figure  they’ll  be  in 
this  for  a  while,”  Averbook  says.  But  if  you  don’t  see  a 
lot  of  innovations  to  the  product  suite,  that  might  be 
a  company’s  way  of  positioning  itself  to  be  bought. 

This  doesn’t  mean  you  need  to  avoid  potential  tar¬ 
gets,  Kutnick  says.  Just  maintain  a  clear  delineation 
between  applications  that  might  fade  from  the  scene 
and  the  software  underlying  your  infrastructure. 

“Let’s  say  you’re  going  to  do  something  with  BEA, 
which  is  high  on  my  list  of  likely  acquired  companies 
in  the  next  three  years,”  Kutnick  says.  “You  need  to 
understand  all  the  interfaces  and  document  where 
you  make  changes.  You  can  use  it,  but  with  open 
eyes.”  O  54379 


Brandel  is  a  Computerworld  contributing  writer 
in  Grand  Rapids,  Mich.  You  can  contact  her  at 
mary.brandel@comcast.net. 
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AT  DTE  ENERGY  CO.,  lone 
wolves  need  not  apply. 
“Lone-wolf  developers”  is 
actually  what  Lynne  Ellyn 
calls  them,  and  she  says 
they  are  the  reason  so  many 
companies  fail  at  software  reuse.  Ellyn, 
a  senior  vice  president  and  CIO  at 
DTE  Energy,  claims  that  her  company 
has  found  a  better  way  —  one  that 
marries  the  principles  of  open-source 
software  with  keen  insights  into  how 
people  learn  and  what  motivates  them. 

Ellyn  says  the  Detroit-based  diversi¬ 
fied  energy  company  has  set  up  an 
internal  “open-source”  software  opera¬ 
tion.  Developers  across  the  $7  billion 
company  add  their  creations  to  a  reuse 
library  and  take  needed  components 
from  it.  Sometimes  they  put  the  com¬ 
ponents  back  after  improving  them. 
The  spirit  of  the  program  borrows 
heavily  from  the  external  open-source 
movement  that’s  behind  the  Linux  op¬ 
erating  system,  the  Apache  Web  server 
and  other  popular  pieces  of  nonpropri¬ 
etary  software. 

DTE  Energy  has  focused  on  the  con¬ 
cept  of  “meritocracy,”  one  of  the  under¬ 
pinnings  of  the  open-source  move¬ 
ment,  according  to  Ellyn.  Meritocracy 
has  two  basic  tenets  at  the  company: 
First,  items  submitted  for  inclusion  in 
the  reuse  library  must  be  reviewed  and 
judged  to  be  of  high  quality,  or  they 
won’t  be  accepted.  Second,  the  people 
whose  submissions  are  accepted  are 
held  in  high  esteem  by  the  development 
communities  of  which  they  are  a  part. 

This  spirit  of  meritocracy,  and  the 
sense  of  community  that  goes  with  it, 
are  the  missing  ingredients  in  most 


Establish  a  software  review  panel 
and  pr<  ess. 

Hold  regular  meetings  of  devel¬ 
opers  at  various  levels.  Let  practi¬ 
tioners  “own”  the  meetings. 

Establish  mailing  lists,  some  of 
them  specialized  by  technology  or 
function. 

Recognize  excellen  s  and  ap¬ 
plaud  contributions,  but  avoid 
status  and  hierarchies. 

Study  project  requirements  and 
designs  for  reuse  opportunities. 

Show  “lone  wolves”  the  door. 


r-i  Software 

Reuse: 

MAKING  IT  WORK 


DTE  Energy  may  have  cracked 
the  cultural  side  of  reusable 
software.  By  Gary  H.  Anthes 


failed  software-reuse  efforts,  Ellyn  says. 

The  review  and  approval  function  at 
DTE  Energy  is  performed  by  a  panel  of 
five  senior  developers.  “They  are  all 
pretty  universally  admired  within  the 
organization  for  their  excellence  in 
software  development,”  Ellyn  says, 

“so  they  have  some  stature  with  our 
community.” 

Some  of  the  components  included  in 
the  reuse  library  have  been  volunteered 
by  programmers  who  developed  them 
for  a  project  and  saw  the  possibility  for 
broader  use.  In  other  cases,  a  develop¬ 
ment  team  has  been  commissioned  by 
the  review  panel  to  develop  something 
specifically  for  reuse.  The  panel  reviews 
requirements  at  the  beginning  of  all  proj¬ 
ects,  looking  for  reuse  opportunities. 

“Either  way,”  Ellyn  says,  “[the  com¬ 
ponent]  still  has  to  be  judged,  and  the 
process  of  acceptance  is  one  of  recog¬ 
nizing  the  excellence  in  people.  The 
dynamic  is  around  public  recognition 
of  merit,  and  that’s  very  energizing.” 

SEPARATE  CODE 

DTE  Energy’s  software-reuse  program 
is  based  on  the  notion  of  shared  ser¬ 
vices,  in  which  various  functions  com¬ 
mon  to  multiple  applications  —  such 
as  security,  logging,  lookup  or  configu¬ 
ration  —  are  carved  off  as  separate 
code  (usually  Java)  that  can  be  invoked 
as  services  by  new  applications  as  they 
are  built. 

Developers  meet  quarterly  and  some¬ 
times  more  often  to  discuss  ideas,  prob¬ 
lems  and  best  practices.  And  meetings 


A  Palette  of 
Options 


The  components  in  DTE  Energy’s  reuse 
repository  can  be  design  or  development 
templates,  but  most  are  Java  code,  says 
Phillip  Smith,  a  member  of  the  reuse  re¬ 
view  panel.  They  can  be  application 
services  such  as  billing  or  customer- 
interface  functions,  or  technical  services. 

In  some  cases,  developers  take 
source  code  or  binaries  and  incorporate 
it  into  their  own  code,  and  in  others,  the 
code  is  invoked  strictly  as  a  service. 

For  example,  DTE  Energy's  panel  of 
technical  architects  recently  commis¬ 
sioned  the  creation  of  an  “environmental 


/gives  the  program 
t  properties  for  the  environ- 
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-  Gary  H  Anthes 
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of  “development  communities,”  as  for 
Java,  happen  once  a  month,  says  Phillip 
Smith,  one  of  the  five  technical  archi¬ 
tects  on  the  review  panel.  “Supervisors 
don’t  own  our  meetings;  the  practition¬ 
ers  own  them,”  he  says.  “So  it’s  not 
your  boss  disseminating  things;  it’s  a 
peer-to-peer  type  of  communication.” 

People  who  have  earned  industry 


certifications,  such  as  for  J2EE,  are  rec¬ 
ognized  at  these  meetings,  as  are  those 
who  have  contributed  to  the  reuse 
repository.  “We  say,  ‘This  person  has 
done  great  work.  Let’s  applaud  that,’  ” 
Smith  says. 

Developers  also  extensively  use  in¬ 
ternal  mailing  lists  and  discussion 
groups.  Some  of  the  15  or  so  lists  are 
devoted  to  specialized  groups,  while 
others  include  all  400  developers, 
Smith  says.  “Someone  will  send  out  a 
question  like,  ‘I’m  struggling  trying  to 
get  this  inserted  in  the  database.  Has 
anyone  out  there  come  across  this  prob¬ 
lem?’  Regardless  of  the  solution,  it’s 
owned  by  the  whole  group.  Everything 
is  focused  on  community,”  Smith  says. 
Project  teams  are  “cross-pollinated” 
with  developers  from  different  Michi¬ 
gan  offices  and  with  people  of  varying 
levels  of  ability,  he  says. 

NO  HIERARCHY 

Although  contributors  are  publicly 
recognized,  the  company  takes  pains 
not  to  establish  a  hierarchy  of  develop¬ 
ers.  “We  try  to  steer  away  from  status, 
because  status  just  divides  people,” 
Smith  says.  “We  definitely  applaud 
[reuse]  and  celebrate  it,  but  it’s  not 
like,  ‘Oh,  this  person  has  submitted 
three  components,  and  this  other  per¬ 
son  has  only  submitted  two.’  ” 

DTE  Energy  saved  $75,000  last  year 
by  reusing  components,  estimates 
Smith.  So  far  this  year,  four  new  proj¬ 
ects  have  incorporated  10  components 
each  on  average,  or  about  40%  of  their 
total  application  code. 

Without  the  kind  of  cultural  support 
DTE  provides,  reuse  is  likely  to  suc¬ 
cumb  to  any  number  of  technical  pit- 
falls,  says  Tom  Welsh,  an  analyst  at 
Cutter  Consortium  in  Arlington,  Mass. 

“DTE  is  going  in  the  right  direction. 
Reuse  is  a  corporate  team  business  and 
cannot  usually  be  undertaken  by  indi¬ 
viduals  or  even  small  groups,”  says 
Welsh. 

Vamsi  Dantulari  is  a  Java  program¬ 
mer  working  on  a  voice-response  de¬ 
velopment  project  at  DTE  Energy.  She 
says  the  project  has  used  four  source- 
code  components  from  the  reuse  li¬ 
brary.  Some  of  them  would  have  taken 
weeks  of  development  effort  had  she 
coded  them  from  scratch,  she  says. 

Dantulari  hasn’t  yet  contributed  a 
component  to  the  reuse  library,  but  she 
did  contribute  to  the  development 
community  recently  by  helping  to  set 
up  a  Java  training  program.  “Two  years 
back,  not  many  people  knew  about 
me,”  she  notes.  “But  I  got  a  lot  of 
recognition  for  that.”  ©  54381 
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The  place  to  look  for 
an  advantage  is  at  the 
edge  of  your  business, 
say  John  Hagel  IH  and 
John  Seely  Brown. 

Most  companies  are  structured  to  run 
I  I  1  ,  ■  their  operations  efficiently  and  squeeze 

I  |  U  i  *  1  ns  much  profit  as  possible  from  each 
mk.  ViUJI  transaction.  But  emerging  competitors 
in  Asia  are  much  more  interested  in  innovation,  and 
they’re  changing  the  rules  about  how  to  achieve  it. 

In  their  new  book,  The  Only  Sustainable  Edge,  John 
Hagel  III  and  John  Seely  Brown  look  at  this  approach  to 
innovation  and  its  implications  for  U.S.  compa¬ 
nies  and  IT  organizations.  They  talked  with 
Computerworld’s  Thomas  Hoffman  about  the 
changing  business  landscape. 

As  you  point  out,  most  companies  are  structured  to 
run  efficiently,  not  to  drive  innovation.  For  companies 
to  flip  the  equation,  they’d  need  to  make  some  pretty 
wrenching  changes  to  their  operating  models,  yes? 

JH:  I  would  certainly  accept  that  it’s  a  chal¬ 
lenge.  To  get  better  faster,  you  need  to  do  that 
in  partnership  with  other  companies.  No  mat¬ 
ter  how  many  smart  people  there  are  in  your 
organization,  there  are  a  lot  more  smart  people 
outside  that  you  could  work  with.  We  tried  to 
provide  a  path  for  companies  to  make  this 
transition  —  develop  those  relationships  to  get 
better  faster  and  develop  capabilities  faster. 

JSB:  The  first  step  is  to  move  from  a  very  closed 
view  of  innovation  to  a  more  open  model  where 
there  are  suppliers  and  other  people  around  the 
world  that  are  at  least  as  talented  as  people  within 
our  organization.  [Then]  we  can  ask  questions  such 
as,  “How  can  we  tap  into  their  innovation?”  and 
“What  do  we  want  to  consider  to  be  our  distinctive 
edge?”  and  “How  can  we  work  with  these  people  and 
extend  our  own  capabilities?” 


If  you  look  at  what  we’re  doing  with  computer  ar¬ 
chitectures,  we  can  take  advantage  of  loose  connec¬ 
tions  and  coordinate  processes  and  practices  with 
other  organizations.  From  a  technical  point  of  view, 
we  now  have  SOA  [service-oriented  architecture] 
and  virtualization  architectures  and  this  whole  no¬ 
tion  of  social  software.  Organizations  can  now  exam¬ 
ine  how  this  folds  into  SOAs  to  support  long-lived 
conversations  as  opposed  to  short-lived  transactions. 

Are  some  companies  doing  this  effectively  now? 

JH:  One  company  that  we  profile  extensively  is  Li 
&  Fung  in  the  apparel  industry.  [It]  helps  apparel  de¬ 
signers  assemble  customized  supply  chains  and  deliv¬ 
er  very  tight  performance  requirements  in  terms  of 
speed  to  market  and  cost  and  quality  objectives,  but 
[it’s]  doing  it  in  such  a  loosely  coupled  way. 

This  parallels  what  the  SOA  and  Web  services 
community  would  talk  about  in  defining  interfaces 
to  move  one  module  in  and  one  module  out.  Most 
American  companies  tend  to  very  tightly  define  re¬ 
quirements  throughout  all  stages  of  the  process. 

A  lot  of  this  is  being  driven  by  the  mind-set  and 
the  sense  of  urgency  in  Asia.  There’s  the  sense  that 
the  wage  rate  advantages  they  have  are  very  transi¬ 
tional  and  that  if  they  fall  back  on  that,  they  are 
going  to  rapidly  lose  market  share. 

Why  are  the  greatest  opportunities  found  at  the  “edge,”  whether 
it’s  the  edge  of  the  business  where  companies  interface  with 
business  partners  or  at  the  periphery  of  mature  markets? 

JSB:  At  the  edge,  you  have  less  inertia,  so  you  can 
experiment,  and  you  don’t  have  big  legacy  systems, 
so  my  competitive  edge  is  to  think  about  things 
differently. 

JH:  At  the  edge,  you  will  be  able  to  build  your  ca¬ 
pabilities  much  more  rapidly  than  organizations  that 
are  more  inward-focused. 

Is  it  fair  to  say  that  most  companies  will  struggle,  if  not  fail, 
at  trying  to  move  in  this  direction? 

JH:  If  they  continue  to  be  complacent 
and  focus  on  operational  efficiency  versus 
driving  capability,  they  will  fail. 

What  we  see  in  these  Asian  companies  is 
a  focus  on  rapid  innovation.  It’s  a  much  dif¬ 
ferent  mind-set  than  what  most  Western 
companies  do  today. 

JSB:  And  Western  companies  [need]  to 
recognize  that  they  don’t  have  a  divine  right 
to  be  the  main  source  of  innovation. 

Are  CIOs  well  positioned  to  support  businesses  that 
try  to  make  these  transformational  changes? 

JH:  IT  is  a  key  enabler  of  these  practices, 
and  CIOs  can  be  catalysts  and  change  agents 
to  help  senior  management  recognize  what’s 
available  to  support  these  broader  changes. 
There’s  also  the  ability  to  recognize  what’s  possible 
through  SOA,  through  loose  coupling  —  an  impor¬ 
tant  foundation  in  recognizing  new  processes. 

JSB:  Part  of  the  irony  is  that  it’s  the  IT  infrastruc¬ 
ture  —  like  monolithic  ERP  systems  —  that  keeps 
businesses  from  experimenting  with  new  things. 

It’s  not  always  the  big  bang  but  the  ability  to  make 
new  iterations  with  blinding  speed  that  drives  new 
opportunities.  ©  54421 
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We  believe  that  a  new  opportu¬ 
nity  and  a  new  imperative  -  the 
acceleration  of  capability  build¬ 
ing  -  will  shift  our  individual  and 
collective  mind-sets  from  a 
orldview  that  focuses  on  sta¬ 
le,  zero-sum  relationships  to 
one  that  emphasizes  dynamic, 
non-zero-sum  relationships.  As 
we  adopt  these  different  perspectives,  we  will  find  that 
most  of  our  institutions  today  are  fundamentally  lacking. 

Static,  zero-sum  worldviews  generally  arise  when 
people  focus  on  the  allocation  of  existing  resources. 
Existing  resources  have  a  fixed  quantity,  and  with  rel¬ 
atively  modest  exceptions,  if  one  party  acquires  a  re¬ 
source,  other  parties  are  deprived  of  that  resource. 

With  its  70-year  focus  on  equilibrium  states,  the 
economics  profession  has  reinforced  this  orientation. 
Equilibrium  states  are  easier  to  model  quantitatively, 
but  such  models  simplify  the  world,  including  the  key 
assumptions  that  capabilities  are  a  given. 

If  we  recognize  that  capabilities  are  not  a  given  but 
can  be  quickly  built,  our  worldview  undergoes  a  fun¬ 
damental  shift.  Now  we  become  less  concerned  with 
the  distribution  of  rents  and  more  focused  on  the  cre¬ 
ation  of  new  rents.  Relationships  that  were  previously 
viewed  as  competitive  become  more  complementary 
-  we  begin  to  realize  that  we  need  other  specialized 
players  if  we  wish  to  deepen  our  own  capabilities 
more  quickly.  The  new  value  we  can  create  together 
moderates,  even  if  it  never  entirely  eliminates,  the 
concerns  about  the  distribution  of  the  proceeds.  We 
begin  to  turn  our  attention  more  to  the  people  we 
work  with,  because  they  hold  the  key  to  the  accelera¬ 
tion  of  creatively  building  capability  -  and  therefore 
the  creation  of  new  value. 

More  generally,  stocks  of  existing  assets,  including 
information  and  knowledge,  diminish  in  value  relative 
to  flows  of  new  ideas  and  experiences  that  can  help 
accelerate  our  capability  building.  In  many  cases  the  in¬ 
stitutional  ability  to  accelerate  capability  building  will 
depend  as  much  on  position  in  relevant  flows  as  on 
the  attributes  of  the  institution  itself.  For  this  reason, 
this  new  worldview  emphasizes  the  importance  of  the 
evolution  of  local  ecosystems,  global  process  net¬ 
works  and  communications  and  transportation  infra¬ 
structure  rather  than  focusing  on  institutions  in  isola¬ 
tion. 

Adapted  from  The  Only  Sustainable  Edge:  Why  Business 
Strategy  Depends  on  Productive  Friction  and  Dynamic 
Specialization,  by  John  Hagel  III  and  John  Seely  Brown, 
with  permission  of  Harvard  Business  School  Press. 
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Competing 


Three  books  lookat  dwindling  U.S.  talent,  project  manage¬ 
ment  and  the  realities  of  real  time,  bythomas  hoffman 
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■  The  Flight  of  the  Creative  Class:  The  New 
Global  Competition  for  Talent,  by  Richard 
Florida  (HarperBusiness,  336  pages, 
$25.95).  For  decades,  the  U.S.  has  reigned 
as  the  world’s  center  for  innovation,  be 
it  in  high  tech,  science  or  entertainment. 
And  as  Florida  astutely  observes,  “Of 
critical  importance  to  American  success 
this  last  century  has  been  an  influx  of 
global  talent,”  from  Scottish-born  steel 
titan  Andrew  Carnegie  to  the  Hungari¬ 
an  co-founder  of  Intel,  Andy  Grove. 

But  as  Florida,  the  Hirst  Professor  at 
George  Mason  University’s  School  of 
Public  Policy,  argues,  a  combination  of 
factors,  including  better  occupational 
and  educational  opportunities  in 
places  like  Singapore  and  India,  are 
leading  to  a  global  war  for  creative  tal¬ 
ent  —  a  battle  that  he  believes  the  U.S. 
is  positioning  itself  to  lose. 

Tighter  immigration  and  visa  poli¬ 
cies  that  have  been  adopted  since  9/11 


are  leading  an  increasing  number  of  for¬ 
eign-born  graduate  students  to  enroll 
in  non-U.S.  universities  and  to  work 
outside  the  country  in  more-receptive 
environments.  But  that’s  just  one  of  the 
problems  that’s  diminishing  the  na¬ 
tion’s  ranking  as  a  key  destination  for 
creative  workers,  says  Florida. 

He  also  notes  that  40  million  people, 
or  roughly  30%  of  the  U.S.  workforce, 
are  members  of  what  he  terms  the 
“creative  class”  —  people  who  are  em¬ 
ployed  in  industries  ranging  from  sci¬ 
ence  and  engineering  to  the  arts  and 
white-collar  professions  such  as  law. 
But  that  leaves  the  other  70%  strug¬ 
gling  to  survive  in  lower-paying  manu¬ 
facturing  and  service-industry  jobs,  a 
situation  that  Florida  says  is  “exacer¬ 
bating  economic  inequality.” 

Meanwhile,  regions  such  as  Banga¬ 
lore,  Tel  Aviv,  Singapore  and  Beijing 
are  aggressively  recruiting  foreign 
technology  companies  and  investing 
heavily  in  higher  education  and  in  re¬ 
search  and  development. 

In  this  smartly  written  and  well- 
documented  book,  Florida  calls  upon 
government,  business  and  academic 
leaders  —  as  well  as  everyday  citizens 
—  to  develop  something  as  large-scale 
as  the  New  Deal  to  build  a  fully  cre¬ 
ative  society.  Even  those  readers  who 
disagree  with  Florida’s  anti-isolationist 
views  will  find  this  well-crafted  tome 
thought-provoking  and  worthwhile. 

■  The  Rational  Project  Manager:  A  Thinking 
Team’s  Guide  to  Getting  Work  Done,  by  An¬ 
drew  Longman  and  Jim  Mullins  (John 
Wiley  &  Sons  Inc.,  256  pages,  $27.95). 
Savvy  project  managers  know  that  the 
biggest  roadblocks  to  delivering  proj¬ 


ects  on  time  and  within  budget  and 
scope  are  typically  organizational  iner¬ 
tia  and  people  issues.  The  authors, 
who  are  consultants  at  Kepner-Tregoe 
Inc.  in  Princeton,  N.J.,  do  a  deft  job  of 
addressing  these  topics  while  incorpo¬ 
rating  their  organization’s  problem¬ 
solving  and  decision-making  techniques. 

They  also  provide  a  useful  perspec¬ 
tive  on  why  today’s  projects  are  differ¬ 
ent  from  those  that  came  before.  For 
example,  they  point  out  the  challenges 
of  managing  a  project  that’s  planned  by 
one  group  and  implemented  by  another. 

The  book  includes  a  chapter  devoted 
to  managing  people,  and  although  some 
of  the  authors’  suggestions  may  come 
off  as  no-brainers  (“Does  the  performer 
have  the  necessary  knowledge  and  skill 
to  perform?”),  they  address  fundamen¬ 
tal  questions  that  project  leaders  should 
continually  be  asking  themselves. 

The  authors  raise  issues  that  are 
rarely  included  in  project  management 
texts,  such  as  the  importance  of  obvi¬ 
ous  questions  like,  “Why  are  we  doing 
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this  project?”  Also  of  value  are  tips  and 
pitfalls  boxes  throughout  each  chapter. 

Given  the  increasing  amount  of 
complexity  that  today’s  project  man¬ 
agers  face,  it’s  refreshing  to  come 
across  a  book  that  does  such  an  effec¬ 
tive  job  of  breaking  these  challenges 
down  into  bite-size  portions. 

■  The  Real-Time  Enterprise:  Competing  on 
Time  With  the  Revolutionary  Business  SEx 
Machine,  by  Peter  Fingar  and  Joseph 
Bellini  (Meghan-Kiffer  Press,  224  pages, 
$34.95).  The  notion  of  a  real-time  en¬ 
terprise  (RTE)  that’s  able  to  sense  and 
respond  quickly  to  customer  demands 
and  market  shifts  has  been  around  for 
years.  But  in  the  real  world,  only  a  few 
companies,  like  Dell  Inc.  and  Cisco 
Systems  Inc.,  have  been  able  to  pull 
this  off,  in  part  by  leveraging  business 
process  management  systems  to  flatten 
their  operations  and  differentiate 
themselves  from  competitors  bound  to 
old  technologies. 

Fingar,  an  executive  partner  at  The 
Greystone  Group  LLC,  and  Bellini,  a  se¬ 
nior  vice  president  in  the  software  prod¬ 
ucts  and  services  group  at  Brooks  Au¬ 
tomation  Inc.,  do  a  proficient  job  of  doc¬ 
umenting  the  successes  of  RTE  pioneers, 
including  General  Electric  Co.,  The  Pro¬ 
gressive  Corp.  and  Wal-Mart  Stores  Inc. 
The  authors  detail  how  they  became 
more  responsive  to  customers  and  mas¬ 
tered  business  process  management  to 
help  them  dominate  their  markets. 

Although  the  authors  underscore  the 
need  for  organizations  to  provide 
workers  with  ample  time  to  absorb  the 
process  changes  that  come  with  RTE, 
they  devote  just  two  and  a  half  pages 
fto  the  most  critical  requirements  for 
success  —  people  and  corporate  cul¬ 
ture.  (Note:  “SEx  Machine”  refers  to  an 
acronym  for  strategy  and  execution, 
not  to  be  confused  with  James  Brown’s 
1970  funk  classic.)  O  54236 
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IT  Infrastructure 

■  July  13-15,  San  Diego 
Sponsor:  Burton  Group 

Catalyst  Conference  North  America  in¬ 
cludes  multiple  tracks  and  topics,  such 
as  the  business  justification  for  identity 
management,  the  future  of  the  net¬ 
work  application  platform,  implement¬ 
ing  Web  services,  the  right  VPN  for  re¬ 
mote  access,  preparing  networks  for 
IP  telephony,  and  evolving  security 
strategies. 

www.burtongroup.com/catalyst 


IP  Communications 

■  July  13-15,  Boston 
Sponsor:  Wainhouse  Research 

WR  Summit  2005:  Driving  the  Enter¬ 
prise  With  IP  Communications  in¬ 
cludes  directions  in  video  and  collabo¬ 
ration,  marrying  videoconferencing 
with  HDTV,  videoconferencing  and 
other  synchronous  technologies  in  ed¬ 
ucation,  the  managed  services  conun¬ 
drum  and  transforming  business  com¬ 
munications  with  embedded  collabo¬ 
ration.  www.wainhouse.com/ 
wrsummit 


Leadership 

■  July  27-29,  Annapolis,  Md. 
Sponsor.  The  Conference  Board  Inc. 

Topics  of  the  2005  Leadership  Excel¬ 
lence  Summit:  Ethics,  Integrity  &  Char¬ 
acter  include  building  a  culture  of  lead¬ 
ership  excellence:  decision-making; 
authenticity,  credibility  and  trustworthi¬ 
ness;  leadership  challenges  of  a  com¬ 
pany  in  transition;  transformational 
leadership;  and  globalization  of  leader¬ 
ship  concepts,  www.conference- 
board.org/conferences 


ITIL  Processes 

■  Aug.  10-11,  Scottsdale,  Ariz. 
Sponsor:  Pink  Elephant 

ITIL  Implementation  Road  Map  in¬ 
cludes  topics  such  as  establishing  a 
service  desk  according  to  the  Informa¬ 
tion  Technology  Infrastructure  Library; 
defining  an  ITIL-enabling  organization 
structure  and  process  roles;  integrat¬ 
ing  people,  processes  and  technology; 
IT  governance;  building  an  IT  service 
management  improvement  plan;  and 
implementing  configuration  manage¬ 
ment.  www.pinkelephant.com/ 
conference 


GARY  H.  ANTHES 


We’re  Mad 
As  Hell,  But . . . 


I  have  a  fantasy  that  goes  like  this:  I’m  download¬ 
ing  some  software  from  a  vendor’s  Web  site,  and 
I’m  presented  with  a  screen  with  many  lines  of 
tiny  type  followed  by  two  boxes.  One  says  “I 
accept,”  and  the  other  says  “I  do  not  accept.” 

I’m  feeling  lucky  —  or  maybe  just  cantankerous  —  so 
I  click  the  “I  do  not  accept”  box.  The  download  comes 
to  an  abrupt  end. 


But  a  few  moments  later, 

I  receive  an  e-mail  from  the 
software  vendor.  “Dear  sir,” 
it  says,  “we  couldn’t  help 
noticing  that  you  rejected 
our  license  agreement,  the 
one  that  gives  us  all  the 
rights  and  you  no  remedies 
when  our  software  crashes 
or  admits  hackers,  as  it 
surely  will.  Frankly,  we 
don’t  blame  you.  As  buyers, 
we’d  never  sign  anything 
like  that  either.  But  we  real¬ 
ly,  really,  really  want  your 
business,  so  we  are  going  to  let  you 
have  the  software  anyway.  We  just  ask 
that  you  keep  this  quiet.” 

Fantasy,  indeed.  But  recently,  I  was 
given  hope  that  packaged  software  li¬ 
cense  agreements,  surely  the  most  lop¬ 
sided  in  all  the  world  of  commerce, 
might  be  changing.  Two  of  the  IT  lu¬ 
minaries  I  interviewed  for  Computer- 
world’  s  recent  special  report  on  the  fu¬ 
ture  of  IT  [QuickLink  52738]  said  the 
time  is  ripe  for  software  buyers  to  as¬ 
sert  themselves.  Users  are  so  fed  up 
with  bugs,  bloatware  and  security 
flaws  that  they  will  finally  rise  up  and 
demand  guarantees  and  remedies  from 
vendors,  they  said. 

At  about  the  same  time,  The  Wall 
Street  Journal  published  a  story  saying 
that  customers  are  “starting  to  press 
software  makers  to  assume  responsi¬ 
bility  for  faults  and  pick  up  some  of 


the  costs.”  The  Journal 
noted  darkly  that  “even  a 
whisper  of  the  ‘L  word’  — 
liability  —  sends  shudders 
through  the  software  in¬ 
dustry.” 

But  after  poking  into  this 
issue,  I  found  few  shud¬ 
ders  among  either  sellers 
or  buyers.  Vendors  have 
no  plans  to  change,  and 
while  users  grumble,  for 
the  most  part,  they  accept 
the  status  quo. 

Buyers’  legal  leverage  is 
apparently  so  weak  that  when  I  asked 
Mark  Grossman,  an  attorney  at  DeWitt 
Grossman  PL,  what  advice  he  gives 
clients,  he  cited  IT  measures,  not  legal 
ones:  “Redundancy,  backup,  bringing 
in  security  consultants  and  patching 
the  holes.” 

So  my  plan  to  write  a  front-page 
story  with  a  catchy  headline  like 
“Software  Customers  Cast  Off  Their 
Chains”  or  “Users  Mad  as  Hell,  Not 
Going  to  Take  It  Anymore”  evap¬ 
orated. 

But  that’s  not  quite  the  end  of  the 
story.  David  Weidenfeld,  an  attorney 
at  McDonald’s  Corp.  who  specializes 
in  IT  procurement,  says  nothing  much 
has  changed  in  recent  years  when  it 
comes  to  buying  packaged  software. 
But,  he  insists,  it’s  not  true  that  buyers 
have  no  leverage.  Whereas  Joe  Con¬ 
sumers  like  me  won’t  get  anywhere  by 
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clicking  the  “I  do  not  accept”  button, 
it’s  a  different  story  for  corporate  buy¬ 
ers.  “There  are  things  you  can  do,”  he 
says,  “but  you  have  to  work  really  hard.” 

For  example,  Weidenfeld  says,  it  took 
him  months  of  negotiation  to  get  a  soft¬ 
ware  vendor  to  amend  its  boilerplate 
contract  to  close  what  he  saw  as  a  seri¬ 
ous  security  loophole.  The  software 
had  a  back  door  —  which  the  vendor 
told  customers  about  —  by  which  it  au¬ 
tomatically  reported  usage  of  the  soft¬ 
ware  for  purposes  of  verifying  compli¬ 
ance  with  licensing  terms.  But  Weiden¬ 
feld  insisted  on  a  provision  that  stipu¬ 
lated  to  the  vendor,  “You  will  have  no 
code  in  this  software  that’s  not  part  of 
the  business  application,  and  if  you  do, 
and  anything  happens,  you  are  respon¬ 
sible  for  all  the  damages  that  occur.” 

Although  Weidenfeld  achieved  a  sig¬ 
nificant  victory,  he  says  too  often  the 
purchasing  and  legal  people  negotiat¬ 
ing  with  software  vendors  are  not 
trained  in  IT,  are  not  part  of  the  IT  de¬ 
partment  and  by  habit  focus  on  price 
negotiations.  “They  say,  ‘This  is  not 
the  mainstream  of  our  business.  I  low¬ 
ered  the  price  a  little;  I’m  happy,  let’s 
get  out  of  here.’  ” 

Weidenfeld  says  that  to  break  this 
mind-set,  all  procurement  of  IT 
should  be  consolidated  under  the  CIO, 
but  he  notes  that  the  CIO  may  need  a 
significant  boost  in  staff  and  budget  to 
handle  the  load. 

Successful  negotiating  is  a  matter  of 
hard  work  and  resolve,  he  says.  “If  you 
aren’t  prepared  to  give  the  vendor  a 
flat  ‘no,’  or  a  ‘not  now,’  there’s  a  limit 
to  what  you  can  accomplish.” 

So  when  the  time  is  right  for  that 
front-page  story,  perhaps  the  headline  . 
will  say,  “Users  Work  Like  Hell,  Not 
Going  to  Take  it  Anymore.”  ©  54237 
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MEANS  MORE  POWER 
MORE  AFFORDABL 


ProCurve  Networking  by  HP  offers  a  range  of  affordable 
gigabit-enabled  switches  that  is  second  to  none.  That  means 
you  can  get  better  performance  from  your  network  along  with 
better  performance  from  your  networking  dollars.  Downloads 
that  used  to  take  minutes  can  now  be  done  in  seconds.  And  you 
can  do  it  for  cents.  Not  dollars.  That’s  high-availability  gigabit 
performance  at  the  edge — not  just  the  core  of  your  network. 
What’s  more,  ProCurve  gigabit-enabled  switches  are 
backed  by  a  lifetime  warranty* — perhaps  the  best  in  the 
industry.  More  affordability.  More  choice.  More  productivity. 


HP  ProCurve  SWITCHES: 
•*  2800,  3400, 4100  AND 
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*  5300  SERIES 

Open  standards  enabling 
interoperability  and  ease 
of  integration 

•  Flexibility  of  stackable 
or  chassis  configuration 
lifetime  warranty* 

•  Low  cost  of  ownership 

-  •  Legendary  service  and  support 
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Find  out  how  to  get  the  power  of  gigabit  for  less. 

Visit  www.hp.com/networking/glgabit  for  our  latest  gigabit  promotions. 


ProCurve  Networking 

HP  Innovation 


CLICK  ‘www.hp.com/networking/gigabit  contact  your  local  HP  reseller 


•Lifetime  warranty  applies  to  all  ProCurve  Products,  excluding  the  ProCurve  routing  switch  9300m  Series  and  Secure  Access  700wl  Series,  which  have  a  one-year  warranty  with  extensions  available. 
02004  Hewlett-Packard  Development  Company,  L.P 


For  over  20  years,  Syntel  employees  across  North  America,  Europe,  and  Asia 
have  helped  build  advanced  information  technology  systems  for  leading 
Fortune  500  companies  and  government  organizations  to  improve  their  effi¬ 
ciency  and  competitiveness.  Today,  Syntel  professionals  are  building 
rewarding  careers  by  providing  solutions  in  e-business,  CRM,  Web  Design 
and  Data  Warehousing.  Come  discover  why  Syntel  has  been  ranked  one  of 
“The  200  Best  Small  Companies  in  America”  for  the  last  four  years  in  a  row. 

Due  to  our  rapid  growth,  we  have  immediate,  full-time  opportunities  for  both 
entry-level  and  experienced  individuals  in  the  following  positions: 

Business  Development/ Account  Specialist 

Manage  Sales  activities  and  achieve  sales  quota  for  assigned  territory.  Help 
Syntel's  sales  leadership  in  planning  and  rolling  out  an  inside  sales  strategy. 

Project  Leaders/Managers 

Train  and  manage  programmer  analysts  on  installation  and  configuration  of 
hardware  and  software  application,  as  well  as  be  responsible  for  project 
planning  an  quality  assurance. 

Programmers/ Analysts 

Analyze,  design,  develop,  test,  and  maintain  relational  database 
management  systems. 

The  above-mentioned  positions  should  possess  any 
of  the  following  skills: 

Mainframe 

•  IMS  DM/DC  or  DB2,  MVS/ESA, 

COBOL,  CICS 

DBA 

•  ORACLE  OR  SYBASE 

Client-Server/WEB 

•  Ab-initio 

•  Websphere 

•  Com/Dcom 

•  Web  Architects 

•  Datawarehousing 

•  Informix,  C  or  UNIX 

•  Oracle  Developer  or  Designer 
2000 

•  JAVA,  HTML,  Active  X 

•  Web  Commerce 

•  SAP/R3,  ABAP/4  or  FICO  or  MM 
&SD 

Some  positions  require  a  Bachelor’s  degree,  others  a  Master's  degree.  We 
also  accept  the  equivalent  of  the  degree  in  education  and  experience. 

With  Syntel  (NASDAQ:  SYNT),  you’ll  enjoy  excellent  compensation,  full  ben¬ 
efits,  employee  stock  purchase  plan  and  more.  Please  forward  your  resume 
and  salary  requirements  to:  Syntel,  Inc.,  Attn:  Recruiting  Manager-LD06,  525 
E.  Big  Beaver,  Suite  300,  Troy,  Ml  48083.  Phone:  248-619-2800;  Fax:  248- 
619-2888;  Equal  Opportunity  Employer. 
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•  Focus,  IDMS  OR  SAS 


•  DB2 

•  Oracle  Applications  &  Tools 

•  Lotus  Notes  Developer 

•  UNIX  System  Administrator 

•  UNIX,  C,  C++,  Visual  C++, 
CORBA,  OOD  or  OOPS 

•  WinNT 

•  Sybase,  Access  or  SQL  server 

•  PeopleSoft 

•  Visual  Basic 

•  PowerBuilder 

•  IEF 


PROGRAMMER  ANALYST  - 
Tompkins  Dental  Health  PC 
(Ithaca,  NY),  seeks  Programmer 
Analyst  to  analyze,  design  & 
implement  web-based  applica¬ 
tions  &  customized  business 
software.  Must  possess  exp  in 
the  following  skill  sets:  C,  C++, 
Visual  Basic,  Oracle  &  JAVA. 
Candidates  must  conduct  busi¬ 
ness  analysis,  generate  reports, 
conduct  systems  studies  &  pro¬ 
vide  training  to  end-users  of 
computer  technology.  Competi¬ 
tive  salary.  Please  apply  w/2 
copies  of  resume  to:  HRD, 
Tompkins  Dental  Health  PC, 
2309  North  Triphammer  Rd, 
Ithaca,  NY  14850. 


Senior  SAP  Analyst 
Functional  Consultant  SAP/SD. 
Bach,  of  Eng.  or  related  or  for. 
eq.  w /  5  yrs.  progressively 
responsible  post  Bach.  exp.  or 
Master's  or  for,  eq.  in  Eng. 
Mgmt.  or  related.  3  yrs.  exp. 
SAP  4.6B  or  higher.  1  end  to 
end  implem/lnteg  exp  with 
MM,SM,FI,PS,MySAP,  EDI. 
Willing  to  relocate  frequently. 
SD  Certifications  preferred. 
Resumes  to:  Technology 
People,  Inc.,  Seven  Parkway 
Center,  Suite  679,  Pittsburgh, 
PA  15220. 


E  Computer  Technologies,  Inc. 

Systems  Analysts:  Analyze, 
develop,  integrate  and  Test 
Multi-Tier  Enterprise  Applica¬ 
tions  using  J2EE,  UML,  VB.NET, 
and  Ablnitio  technologies  using 
database  in  Oracle  and  SQL 
Server.  Req.  2  yrs  of  exp.  Send 
resume  to  H.R.  E  Computer 
Technologies,  Inc.,  777  South 
Central  Expy,  Ste#  4-F, 
Richardson,  TX  75080  or  E-mail: 
ravi@ecomDutertech.com. 


Computer  Software 
Engineer  w/exp.  in 
Visual  C/Basic.  Mail  to 
Silicor  Technologies, 
15760  Ventura  Blvd., 
#1250,  Encino,  CA 
91436  or  email  to: 
hr@silicor.com. 


Sr.  Software  Application  Devel¬ 
oper  sought  by  GAVs  in  Denver, 
CO  to  design  and  develop  data¬ 
base-related  ETL  (Extraction 
Transformation  and  Loading) 
client/server  software  applica¬ 
tions  for  Oracle  Relational  Data¬ 
base  Management  Systems  on 
a  UNIX  platform.  Requires  mas¬ 
ter's  or  equivalent  (bachelor's 
plus  5  yrs  progressive  software 
development  experience)  in 
Computer  Science  and  working 
knowledge  of  Infomatica,  Unix 
and  Oracle.  Respond  by  resume 
to  Asha  Vasant,  GAVs  Informa¬ 
tion  Services,  4155  E.  Jewell 
Ave„  Suite  603,  Denver,  CO 
80222. 


Business  Systems 
Manager  -  Admin, 
mng,  maintn  comp 
sys  &  busi  apps. 
Comp  Sci  edu,  DBA 
cert,  ERP  exp.  See 
www.prattinc.com/job 
s.html.  Pratt  Ind¬ 
ustries,  Belleair 
Bluffs,  FL.  Contact 
Sridhar  Anandula, 
Sridhar.reddy@prat- 
tinc.com. 


Senior  Quality  Analyst 
Test,  maintain,  implement,  trou¬ 
bleshoot,  and  monitor  comp, 
programs  &  systems,  incl.  coor¬ 
dinating  installation  of  comp, 
progs.  &  systems.  BS  or  for. 
equiv.  Comp.  Sci.  or  related  w /  5 
yrs.  prog,  responsible  post 
Bach.  exp.  or  Master's  in  Comp. 
Sci.  or  related.  2  yrs.  exp. 
802. lx,  GPRS,  CDMA,  TCP/IP, 
MPLS,  Multicast  routing  proto¬ 
cols,  AToM,  Frame  Relay, 
HDLC,  PDP,  QoS,  VPN  software 
solutions.  Willing  to  relocate  fre¬ 
quently.  Resumes  to:  Tech¬ 
nology  People,  Inc.,  Seven 
Parkway  Center,  Suite  679, 
Pittsburgh,  PA  15220. 


VALIDATION  ENG.  - 
Anlze  &  validate  pharm. 
mfg.  process  &  proto¬ 
cols.  Req’d:  BS  in 
Eng’g.,  &  1  yr.  exp. 
Resumes:  Forest  Lab¬ 
oratories,  Inc.,  500 
Commack  Road, 
Commack  NY  11725. 
Attn:  D.  Cadawallader. 


Zaishui  Jia,  M.D.,  P.A., 
located  in  Missouri  City, 
Texas  seeks  an  experi¬ 
enced  &  degreed  data¬ 
base  administrator  on  a 
full-time  basis  to  design  & 
maintain  electronic  med¬ 
ical  management  &  patient 
claims  database  systems. 
Send  resume  to:  Practice 
Administrator,  5201  High¬ 
way  6,  Suite  500,  Missouri 
City,  Texas  77459.  Put  job 
code  DB2101  on  resume. 


!  Software  Engineering  Manager 
Software  co.  seeks  software  eng 
manager.  Successful  candidate 
will  manage,  supervise  and 
direct  the  design  &  development 
of  interface  and  rating  engine  for 
the  billing,  customer  care  and 
POS  business  needs.  Will  work 
in  MFC  environment  using  MS 
SQL.  Send  resume  to:  ARIS, 
Inc.  10681  Foothill  Blvd.  Suite 
100,  Rancho  Cucamonga,  CA 
91730  or  email 

sejobs@arisinc.com 


Senior  Business 
Systems  Analyst 

Lead  &  manage  large  scale 
implementations  of  technology- 
enabled  business  solutions. 
Define  systems  strategy,  dev. 
system  req..  design  &  prototype. 
Represent  company  in  PMO  or 
equiv.  as  single  point  contact  for 
client.  Masters  or  for.  eq.  in 
Business,  IT  or  related  or  Bach, 
or  for.  eq.  in  Business,  IT  or 
related  plus  five  years  of  pro¬ 
gressively  responsible  post 
Bach.  exp.  3-4  years  Oracle 
SCM  Modules  (ASCP.ODP,  CP, 
MS  &  GOP).  3+  full  life  cycle 
implementations  of  same  Oracle 
SCM  Modules  including  exp.  in 
project,  program  and  client  man¬ 
agement.  Willing  to  relocate  fre¬ 
quently.  Resumes  to:  Tech¬ 
nology  People,  Inc.,  Seven 
Parkway  Center,  Suite  679, 
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FBI  Broadens  Scope  of  Replacement  IT  Project 


BY  GRANT  GROSS 

FBI  DIRECTOR  Robert  Mueller 
last  week  disclosed  more  details 
about  the  agency’s  plan  to  de¬ 
velop  a  replacement  for  the  un¬ 
finished  case-management  sys¬ 
tem  it  scrapped  in  March,  saying 
that  some  other  existing  applica¬ 
tions  will  also  be  replaced  as 
part  of  the  project. 

The  new  system,  called  Sen¬ 
tinel,  is  due  to  be  rolled  out  in 
four  stages  beginning  late  next 
year,  Mueller  told  a  Senate  ap¬ 
propriations  subcommittee,  the 
FBI  expects  to  have  the  full  sys¬ 
tem  in  place  by  early  2009. 

Sentinel  will  incorporate  the 
case  management  functions  that 
were  supposed  to  be  supported 
by  the  Virtual  Case  File  system, 
which  the  FBI  shelved  after  a 


four-year,  $170  million  develop¬ 
ment  effort  [QuickLink  53125]. 

In  addition,  the  new  system 
will  eventually  replace  applica¬ 
tions  that  the  FBI  uses  to  man¬ 
age  criminal  informants  and 
track  bank-robbery  statistics, 
Mueller  said.  He  noted  that  Sen¬ 
tinel  will  support  XML  technolo¬ 
gy  for  data-sharing  purposes. 

The  FBI  doesn’t  yet  have  a  cost 
estimate  for  the  project,  according 
to  an  FBI  official  who  asked  not  to 
be  identified.  She  said  the  system 
likely  will  be  based  on  commer¬ 
cial  software  that  has  been 
tweaked  to  improve  its  security. 
The  agency  plans  to  issue  a  for¬ 
mal  request  for  proposals  to  IT 
vendors  by  midyear. 

The  FBI  is  “confident  we’re  in 
a  lot  better  position  for  the  fu¬ 


ture”  with  Sentinel,  the  official 
said.  “The  capabilities  will  go 
well  beyond  Virtual  Case  File." 

In  written  testimony  to  the 
Senate  subcommittee,  Mueller 
said  the  FBI  will  be  able  to  grad¬ 
ually  add  IT  capabilities  with 
Sentinel.  “We  will  roll  out  key 
technical  services  in  phases, 
such  as  records  and  case  man¬ 
agement  capabilities,  to  smooth¬ 
ly  transition  into  the  new  system 
while  retiring  legacy  applica¬ 
tions,”  he  wrote.  ©  54659 

Gross  writes  for  the  IDG 
News  Service. 

LESSONS  LEARNED 

The  FBI  seems  to  have  figured  out 
how  modern  IT  systems  development 
is  done,  Frank  Hayes  says.  PAGE  46 


from  overseas,”  he  said.  “So  in 
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Spyware 

consent.  Both  bills  still  have  to 
be  approved  by  the  Senate  and 
signed  by  President  Bush. 

Robert  Olson,  a  systems  ad¬ 
ministrator  at  Uline  Inc.,  a 
Waukegan,  Ill.-based  distribu¬ 
tor  of  packing  and  shipping 
materials,  said  he’s  “ecstatic” 
that  Congress  is  taking  action 
against  spyware.  “The  biggest 


Spyware 

Legislation 

Securely  Protect  Yourself 
Against  Cyber  Trespass 
Act  (H.R.29) 

Proposes  fines  of  up  to  S3  million 
for  purveyors  of  programs  that 
illegally  gather  information,  moni¬ 
tor  usage  activity,  hijack  Web 
browsers  and  modify  computer 
settings. 


Internet  Spyware  Prevention 
Act  of  2005  (H.R.  744) 
Proposes  jail  terms  of  up  to  three 
years  for  people  who  use  spy- 
ware  programs  to  intentionally  al¬ 
ter  computer  security  settings  or 
to  access  or  transmit  personal 
data  with  the  intent  of  defrauding 
another  person. 


win  we  get  out  of  this  is  the 
availability  of  a  solid  defini¬ 
tion  that  antispyware  vendors 
can  start  working  with”  to 
identify  and  block  offending 
programs,  he  said. 

But  like  Gelfound,  Olson 
said  stopping  spyware  coming 
from  overseas  won’t  be  easy. 
“There’s  really  no  way  to  en¬ 
act  the  penalties  against  some¬ 
body  who  is  pushing  these 
things  from  outside  the  coun¬ 
try,  unless  you  get  other  gov¬ 
ernments  to  agree,”  he  said. 

The  bills  would  establish  a 
useful  definition  of  what  con¬ 
stitutes  spyware,  said  Pete 
Lindstrom,  an  analyst  at  Spire 
Security  LLC  in  Malvern,  Pa. 
“They  provide  a  framework  for 
deciding  what  exactly  is  good 
and  what’s  bad,”  he  said. 

Several  vendors  of  antispy¬ 
ware  tools  have  been  sued  by 
companies  that  serve  up  Inter¬ 
net  advertising,  claiming  that 
their  products  were  being  er¬ 
roneously  identified  as  spy- 
ware.  Lindstrom  said  the  bills 
approved  by  the  House  “do  a 
good  job  of  assigning  motives 
on  people”  in  such  cases. 

One  of  the  bills  that  was 
passed  last  Monday  seeks  to 
prohibit  practices  such  as  us¬ 
ing  spyware  to  hijack  a  Web 
browser,  install  programs  that 


monitor  keystrokes  or  modify 
PC  settings.  The  proposed  law 
also  requires  that  prominent 
opt-in  notices  be  displayed  by 
all  programs  that  monitor  and 
collect  information  about  the 
online  activities  of  users. 

The  other  bill  would  make 
it  illegal  to  use  spyware  pro¬ 
grams  to  alter  security  set¬ 


tings  or  to  access  personal 
data  for  the  purpose  of  de¬ 
frauding  users  (see  chart). 

The  proposed  laws  are  good 
for  dealing  with  “homegrown” 
spyware,  said  Jarrad  Winter, 
network  security  manager  at 
Western  United  Insurance  Co. 
in  Irvine,  Calif.  “But  really,  the 
most  destructive  stuff  comes 


the  grand  scheme  of  things,  I 
don’t  think  this  will  make  a  big 
difference.” 

What’s  also  needed.  Winter 
said,  is  a  continuing  focus  on 
developing  better  technical 
fixes  for  identifying,  weeding 
out  and  stopping  spyware  pro¬ 
grams.  ©  54686 
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DB2 

the  mainframe  version  of  DB2. 
The  analyst,  who  asked  not  to 
be  named,  noted  that  as  part 
of  a  long-term  strategy,  his 
company  is  looking  to  move 
applications  to  Windows.  He 
said  he  fears  that  the  firm  will 
eventually  replace  DB2  with 
Microsoft  Corp.’s  SQL  Server 
database  companywide. 

That  message  was  repeated 
often  by  users  at  the  confer¬ 
ence  and  elsewhere.  Although 
customers  said  they’re  gener¬ 
ally  pleased  with  the  technical 
direction  of  DB2,  some  said 
IBM  needs  to  step  up  its  mar¬ 
keting  of  both  its  flagship 


database  technology  and  its 
Informix  product  line. 

Those  users’  calls  for  more 
visibility  from  IBM  came  as 
Gartner  Inc.  released  a  report 
showing  that  Oracle  Corp.  re¬ 
covered  ground  in  the  world¬ 
wide  relational  database  mar¬ 
ket  last  year  to  draw  roughly 
even  with  IBM.  According  to 
Gartner,  IBM’s  sales  grew  5.8% 
last  year  to  $2.66  billion,  com¬ 
pared  with  a  14.6%  increase 
for  Oracle  to  $2.64  billion. 

IBM  had  a  34.1%  market 
share,  compared  with  33.7%  for 
Oracle,  Gartner  found.  Micro¬ 
soft  was  a  distant  third  with  a 
20%  market  share,  although 
Gartner  said  the  company’s 
yearly  revenue  grew  18%. 

IBM  “could  do  better  mar¬ 


keting  [DB2]  to  small  busi¬ 
nesses,”  said  Philip  Nelson,  a 
database  administrator  and  a 
consultant  at  ScotDB  Ltd.  in 
Edinburgh.  As  a  result  of 
IBM’s  push  to  automate  DB2 
management  routines,  the 
technology  is  potentially  at¬ 
tractive  to  smaller  companies 
that  want  to  avoid  heavy  ad¬ 
ministration  costs,  he  noted. 

Robert  Omerza,  president  of 
Chicago-based  IDUG  and  a 
systems  manager  at  United 
Parcel  Service  Inc.,  said  that 
over  the  past  year  or  two,  IBM 
has  recognized  that  there’s  an 
awareness  gap  about  DB2’s  ca¬ 
pabilities.  IBM  has  started  tak¬ 
ing  steps  to  address  that  gap 
by  marketing  itself  more  to 
the  DB2  community  and  push¬ 


ing  colleges  to  offer  courses 
on  the  software,  Omerza  said. 

A  user  who  runs  DB2  on 
IBM’s  iSeries  systems  but 
didn’t  attend  the  IDUG  con¬ 
ference  said  that  IBM  would 
have  to  invest  a  lot  of  money 
to  alter  the  perception  that 
DB2  is  a  contender  on  plat¬ 
forms  besides  the  iSeries. 

“We  typically  don’t  even 
think  DB2  when  we  think  of 
other  platforms”  like  Linux 
and  Unix,  said  William  Gabby, 
North  American  operations 
manager  at  Cargill  Inc.’s  Glob¬ 
al  Financial  Solutions  unit  in 
Minnetonka,  Minn. 

For  its  part,  IBM  says  it’s  cre¬ 
ating  partnerships  and  invest¬ 
ing  resources  to  promote  DB2. 
Paul  Rivot,  director  of  compet¬ 


itive  technologies  and  strategy 
in  IBM’s  information  manage¬ 
ment  division,  cited  an  alliance 
with  SAP  AG  that  was  an¬ 
nounced  in  April  under  which 
IBM  will  optimize  DB2  to  bet¬ 
ter  run  with  SAP  applications. 

IBM  also  launched  a  recent 
blitz  that  involved  2,000  sales 
representatives  calling  on  Or¬ 
acle  customers  to  propose 
switching  to  DB2. 

DB2  is  a  solid  product  tech¬ 
nically,  said  James  Governor, 
an  analyst  at  RedMonk  Inc.,  a 
consultancy  in  Bath,  Maine. 
However,  when  IT  users  think 
of  DB2,  he  noted,  they  see  a 
high-end  database  rather  than 
what  it  really  is:  a  broad  family 
of  products  that  meet  a  wide 
range  of  needs.  ©  54683 
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FRANKLY  SPEAKING  ■  FRANK  HAYES 

FBI  on  the  Move 


OW  FAST  CAN  THE  FBI  MOVE?  Last  week,  FBI  Direc¬ 
tor  Robert  Mueller  told  a  Senate  subcommittee  that 
the  bureau  is  working  on  a  new  computer  system  that 
will  let  agents  share  information  about  cases  they’re 
working  on,  but  the  software  won’t  go  live  for  another 
year  and  a  half  (see  story,  page  45). 

If  that  sounds  slow,  you  haven’t  been  paying  attention. 

This  new  system,  dubbed  Sentinel,  is  replacing  the  Virtual  Case 
File  project.  That’s  the  one  the  FBI  officially  spiked  in  March,  after 
$170  million  and  four  years  of  slipped  schedules  —  and  a  mere  three 


months  after  it  became  clear  that  Virtual  Case 
File  wasn’t  going  to  do  what  the  bureau  needed. 

Truth  to  tell,  when  Mueller  announced  the 
end  of  Virtual  Case  File,  I  hoped  for  the  best 
and  expected  the  worst.  Killing  a  big  IT  project, 
especially  a  big  government  project,  isn’t  easy. 

In  fact,  the  official  position  of  Science  Appli¬ 
cations  International  Corp.  (SAIC),  the  contrac¬ 
tor  on  the  old  project,  was  that  Mueller  was 
wrong,  Virtual  Case  File  wasn’t  dead,  the 
software  was  still  being  tested,  and  the  FBI 
wouldn’t  be  making  any  decisions  on  what 
to  do  next  for  three  months  or  more. 

I  assumed  that  between  politics  and  bureau¬ 
cratic  foot-dragging,  that  last  estimate  would  be 
close  to  correct,  even  though  SAIC  was  wrong 
about  everything  else. 

Two  months  later,  there’s  a  new  project  with 
a  workable  schedule  and  a  phased  rollout. 
That’s  impressively  fast. 

Equally  impressive  is  what  the  FBI  has 
learned  from  the  failure  of  Virtual  Case  File. 
According  to  Mueller’s  prepared  testimony  be¬ 
fore  that  Senate  appropriations  subcommittee, 
Sentinel  will  be  developed  and  put  into  use  in 
four  distinct  phases.  Functions  of  legacy  appli¬ 
cations  will  be  rolled  into  each 
phase  so  they  can  be  tested  and 
implemented  before  the  legacy 
systems  are  retired. 

Each  phase  of  system  develop¬ 
ment  will  deliver  stand-alone  capa¬ 
bilities.  And  each  phase  will  be  fully 
funded  before  work  starts,  so  the 
project  won’t  be  orphaned  or  stran¬ 
gled  because  of  budget  cuts  over  the 
next  three  to  four  years. 

Yes,  it’s  nice  that  Sentinel  will 
also  be  fully  buzzword-compliant: 

Mueller  told  the  senators  the  sys¬ 
tem  will  use  XML  to  facilitate  infor¬ 


mation  sharing,  which  must  have  impressed  the 
politicos  greatly.  But  the  actual  technology  is 
background  noise. 

What’s  important  is  that  the  FBI  seems  to 
have  figured  out  how  to  do  modern  IT  systems 
development.  And  its  chief  executive  — 

Mueller  —  appears  to  be  fully  behind  a  process 
of  quick  delivery  of  usable  work,  incremental 
rollouts  and  flexible  implementation. 

Mueller  gets  it.  He  supports  it.  And  he’s  mak¬ 
ing  the  decisions  to  make  it  happen  fast. 

How  did  that  come  to  be?  Mueller  has  report¬ 
edly  always  taken  an  interest  in  IT,  but  he’s  no 
techie.  Someone  helped  him  get  a  clear  picture 
of  the  development  process  —  not  just  the  bot¬ 
tom  line  —  so  he  could  give  it  the  executive 
support  it  needed. 

That  someone  was  most  likely  Zalmai  Azmi, 
who’s  been  serving  as  the  FBI’s  CIO  since  last 
year.  But  whoever  it  was,  getting  Mueller  up  to 
speed  meant  Mueller  looked  a  lot  smarter  in 
front  of  the  senators  holding  the  purse  strings 
last  week.  And  Mueller,  in  turn,  could  better 
support  the  FBI’s  IT  needs. 

And  instead  of  squeezing  through  bureau¬ 
cratic  bottlenecks,  the  FBI  is  on  a  fast  track  to 
getting  Sentinel  working. 

Will  Sentinel  hit  all  its  marks  and 
go  live  starting  at  the  end  of  2006? 
Maybe;  maybe  not.  At  least  now  it 
has  a  chance. 

We  talk  a  lot  about  the  impor¬ 
tance  of  getting  top-level  executive 
support  for  IT  initiatives.  But  we 
don’t  often  get  to  see  such  a  clear 
example  of  the  benefits  —  both  for 
IT  and  the  boss. 

We  still  don’t  know  how  fast  the 
FBI  can  move.  But  now  at  least  we 
know  why  the  FBI  can  move  fast. 

O  54648 
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The  Easy  Way,  the  Hard  Way 

Engineer  gets  an  e-mail  from  sales  that  contains  a 
copy  of  a  fax  inquiry  from  a  customer,  is  there  a  way 
of  telling  from  this  message  what  the  customer’s  fax 
number  is,  so  i  can  reply  that  way?  he  asks  IT  pilot 
fish.  “Naturally,”  says  fish.  “All  I  had  to  do  was  call  the 
originating  sales  guy  to  get  the  fax  number,  and  then 
pass  it  along  to  the  engineer  -  who  is  now  even  more 
amazed  at  the  technical  genius  of  the  IT  department.” 

Um  . . .  No  n uifll/  ly announces. 

There's  a  com-  OliAKK  Tm  there,  now 

plete  power  fail-  ti  |||/w  what?’  ” 
ure  at  the  build-  I  Hr 
ing  that  houses 
this  hospital’s  copy  and 
bulk  mail  center.  No  pa¬ 
tients  are  affected,  but 
net  admin  pilot  fish  calls 
the  help  desk  via  his  cel! 
phone  to  spread  the 
word.  “The  help  desk 
tech  connected  me  to  a 
secretary,”  says  fish.  “I 
told  her  i  needed  to  send 
an  ‘all  user’  e-mail  to 
notify  everyone  that 
our  phones,  faxes  and 
servers  were  down,  and 
started  dictating  ttse 
e-mail  message.  About 
halfway  through,  she 
said,  'Wait  a  minute.  Can 
you  put  this  in  an  e-ntail 
and  send  it  to  me?’” 


Now  What? 

Reid  tech  calls  in  to  this 
vendor's  support  office 
needing  some  informa¬ 
tion  and  a  file  from  the 
server.  “Our  new  trainee 
takes  the  call  on  speak¬ 
erphone,”  reports  a  pilot  i  tern  as  he  takes  fish’s 


Downside 

Human  resources  direc¬ 
tor  wants  to  publish  the 
employee  manual  on  the 
company  intranet,  and  IT 
pilot  fish  is  tasked  with 
making  it  happen.  Then 
fish  gets  an  idea.  He 
puts  the  e-manual  on  a 
mini  CD  and  suggests 
that,  along  with  the  in¬ 
tranet  version,  a  CD 
copy  could  also  be  hand¬ 
ed  out  to  any  employee 
who  wants  one.  Non¬ 
plussed  HR  director 
doesn't  see  the  advan¬ 
tage:  “But  to  use  the  CD, 
the  employee  would 
need  a  computer.” 

Still  a  Few  Bugs 
In  the  System 

This  bakery  has  just 
opened  a  small  balcony 
lunch  area,  and  the 
cashier 

turner  pilot  fish  about 
the  new  computer  sys- 
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fish  on  the  scene.  1 
overhear  the  tech  ask 
for  the  file.  The  trainee 
doesn’t  know  where 
the  file  is,  so  the  tech  is 
going  to  walk  her  to  it. 
’First,  go  to  My  Comput¬ 
er,’  he  says.  The  trainee 
says,  ‘OK,  just  a  minute,’ 
and  places  him  on  hold. 
She  then  walks  over  to 
his  computer,  picks  up 
the  extension  and  proud- 


order.  “He  said  that  it 
$©m  in©  oroGi  ngni 
downstairs  to  the 
kitchen,  where  they 
would  prepare  our  meal 
and  send  it  up,”  fish 
says.  “After  selecting 
our  order  from  the  com¬ 
puter  screen,  he  leaned 
over  the  balcony  and 
yelled,  That’s  two 
Cokes.’ The  software 
just  said ‘soft  drinks.’" 


OGIVE  SHARKY  «  HOLLER.  Send  yow  tn*  tale  of  IT 
life  to  me  at  sharky@computerworid.com.  You’ll 
score  a  sharp  Shark  shirt  if  I  use  it.  And  check  out  the  daily 
teed,  browse  the  Sharkives  and  sign  up  for  Shark  Tank 
home  delivery  at  computerworid.com/sharky. 


Innovations  by  InterSystems 


Real-time  data  analytics  Rapid  integration  platform 

with  a  real-fast  database.  makes  applications  perform  together. 


Imagine  being  able  to  query  a  lightning-fast 
operational  database  in  real  time. 

Now  you  can,  with  our  multidimensional  database 
for  transaction  processing  and  real-time  analytics. 

Only  Cache  combines  robust  objects  and  robust 
SQL,  thus  eliminating  object-relational  mapping. 

It  requires  little  administration,  delivers  speed  and 
scalability  on  minimal  hardware,  and  comes  with  a 
rapid  application  development  environment. 

These  innovations  mean  faster  time-to-market, 
lower  cost  of  operations,  and  higher  application 
performance.  We  back  these  claims  with  this 
money- back  guarantee:  Buy  Cache  for  new 
application  development,  and  for  up  to  one  year  you 
can  return  your  license  for  a  full  refund  if  you  are 
unhappy  for  any  reason.  * 

Innovative  database.  Guaranteed  performance. 


Imagine  being  able  to  get  your  applications  to 
perform  together  as  an  ensemble.  Easily. 

Now  you  can,  with  our  universal  integration 
platform. 

Ensemble  is  the  first  fusion  of  an  integration  server, 
data  server,  application  server,  and  portal  development 
software  -  in  a  single,  seamless  product.  This  is  the 
complete  ensemble  of  technologies  needed  for  rapid 
integration,  fast  development,  and  easy  management. 

These  innovations  mean  all  of  your  integration 
projects  will  be  completed  on  time  and  on  budget, 
with  a  simplified  learning  curve  for  your  IT  staff. 

We  back  these  claims  with  this  money- back  guarantee: 
For  up  to  one  year  after  you  purchase  Ensemble ,  if  you 
are  unhappy  for  any  reason,  we’ll  refund  100%  of  your 
license  fee.  * 

Innovative  integration.  Guaranteed  performance. 


InterSystems  f  InterSystems 

CACHE  ENSEMBLE 


For  a  free  copy  of  CACHf ,  or  to  request  a  free  ENSEMBLE  proof-of-concept  project,  visit  www.InterSystems.com/Free8A 


•Read  about  our  money  bock  guarantees  at  the  web  page  shown  above. 

O  2005  IntcrSwtcou  Corporation.  All  rights  reserved  IntcrSystcnu  Cache  anti  InicrSvucnu  Enscmbk  are  trademarks  of  IntcrSvstcms  Corporation  5  05  CombolnnoSCoVVo 
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The  blade  made  for  Linux,  The  tools  to  make  it  better. 


Put  a  world  leader  in  blades  and  Linux  to  work  for  you.  More  and  more  businesses  are  finding  that  HP  BladeSystem  servers  are  the  tool  their  data  center  needs. 
One  reason  is  that  HP's  blades  are  optimized  for  Linux.  Not  only  do  they  ship  with  powerful  software  tools,  like  HP  Systems  Insight  Manager™  and  ProLiant  Essentials 
they  also  run  key  Linux  apps  from  software  partners  like  PeopleSoft  and  Oracle.  And  with  powerful  AMD  Opteron™  Processors,  you  get  maximum  performance 
now  as  well  as  the  flexibility  to  transition  to  64-bit  computing  now  or  in  the  future.  In  short,  HP  offers  you  the  advantages  of  blades,  Linux  and  legendary  HP  reliability 
all  in  one  neat,  affordable  package.  Get  more  support,  technology  and  advice  from  HP.  So  you  can  build  the  I.T.  you  need. 


HP  ProLiant  BL25p  Blade  Server 


HP  ProLiant  BL35p  Blade  Server 


THE  SOLUTIONS 


•  BL25p:  2  AMD  Opteron™  Processors  Model  200 
(up  to  2.60GHz) 

•  BL35p:  2  AMD  Opteron™  Processors  Model  200 
(2.40GHz) 

•BL25p:  Up  to  48  servers  per  rack 

•  BL35p:  Up  to  96  servers  per  rack 

•  HP  Systems  Insight  Manager™  for  Web-based 
networked  management  through  a  single  console 

•  Rapid  Deployment  Pack  for  ease  of  deployment  and 
ongoing  provisioning  and  reprovisioning  in  Linux- 
mixed  OS  environments  (optional) 


THE  BENEFITS' 

•  Up  to  23%  savings  on  acquisition  cost 
9  Up  to  23%  less  power  consumption 

•  Up  to  93%  fewer  cables 

•  43%  less  space  needed  for  same  number  of  processors 

•  Hot-swappable  server  design 

•Single  interface  for  local  and  remote  management 
of  servers,  storage,  software  and  networking 


Enhance  your  system. 


HP  STORAGEWORKS  MSA1500CS 

-  Up  to  24TB  of  capacity  {96  250GB  SATA  drives)  -  Up  to  16TB  of  capacity 
(300GB  SCSI  drives)  -  Ability  to  mix  SCSI  and  Serial  ATA  enclosures  for 
greater  flexibility  -  2GB/1GB  Fibre  connections  to  host  flexibility 


Save  up  to  $844  on  the  4-hour  response,  24-hour-a-day,  3-year  warranty  upgrade1 


Save  $1,744  when  you  purchase  an  HP  BladeSystem  enclosure 
and  8  BladeSystem  Management  Suite  Licenses.3 

AMD 

CALL 

1-866-625-3575 

m 

r<?s 

CLICK 

www.hp.eom/go/bladesmag46 

Opteron 

invent 

CONTACT 

your  local  reseller 

1.  Based  on  internal  HP  testing;  compared  to  similarly  configured  HP1U.2P  server  with  SAN  connectivity.  For  configurator,  please  vtslt:http:/^30099.www3.hp.com/configurator/catalog-isslpc.asp.  2.  Otter  valid  through  7/31/05  on  purchase  ot  four-hour  response.  24-hour-a-day,  three-year  warranty  upgrade 
tor  MSA  1 000  or  MSA  1 500  products.  3.  Offer  valid  through  8/31  /05  on  purchase  ot  HP  BladeSystem  enclosure  and  eight  BladeSystem  Management  Suite  licenses.  Offers  valid  in  U.S.  only.  Otters  cannot  be  combined  with  any  other  otter  or  discount  and  are  good  while  supplies  last.  See  Web  site  for  full  details. 
linuxtsaU.S.  registered  trademark  of  Linus  Torvalds.  Oracle  is  a  registered  U.S.  trademark  of  Oracle  Corporation,  Redwood  City.  California.  AMD,  the  AMD  Arrow  Logo,  AMD  Opteron  and  combinations  thereof  are  trademarks  of  Advanced  Micro  Devices,  Inc.  ©2005  Hewlett-Packard  Development  Company.  L.P. 


